Limiting exactly which actions and data an agent's tools are allowed to touch, so a bug or bad decision can only cause damage within that narrow boundary.
💡 Mental model: Think of it like giving a contractor a key to one room, not the whole house.
often confused with SandboxA sandbox isolates where actions run; scoped permissions limit what they're allowed to touch — different layers of the same safety goal.