Permissions

Tool gate ask mode, approval rules, and egress allowlists.

Bridge does not set exec mode to full or askFallback to allow. Owner rules in approval-rules.json.