# Your agent's permission model stops at your home folder

DevFeed: [Your agent's permission model stops at your home folder](<https://devfeed.tech/articles/your-agent-s-permission-model-stops-at-your-home-folder-15991.md>)

Original publisher: [Read original article](<https://workos.com/blog/agent-permissions-blast-radius>)

Author: WorkOS

Published: 2026-09-02T00:00:00Z

Content type: opinion

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [coding](<https://devfeed.tech/topics/coding.md>), [API](<https://devfeed.tech/topics/api.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agents](<https://devfeed.tech/tags/agents.md>), [api](<https://devfeed.tech/tags/api.md>), [coding-agents](<https://devfeed.tech/tags/coding-agents.md>), [developer](<https://devfeed.tech/tags/developer.md>), [permission](<https://devfeed.tech/tags/permission.md>), [yolo](<https://devfeed.tech/tags/yolo.md>)

## AI overview

This opinion article argues that coding-agent permission systems primarily protect local files and shell actions, while providing little business-aware control over API operations such as CRM changes. It examines approval fatigue, automatic approval modes, and the need for permission models that understand business impact.

## Source excerpt

Coding agents were built to guard a filesystem. The blast radius that matters now is in your CRM.