Oops I Did It Again, I Forgot --dry-run — Agent permissions aren't about distrusting the agent. They're about acknowledging that even a capable actor will occasionally make mistakes. Build so mistakes don't take down the building.