When do AI agents need permission boundaries? — PLINKFEED