Skip to main content
Agents

Asking an agent to do a job still leaves the question of what it may do

A survey of 21 research proposals and five commercial agents found gaps between users' ability to express permission preferences and the controls products offered.

8 Nov 2026

Two people can ask an assistant to help with email and mean different things. One wants drafts to review. Another is comfortable with automatic replies to familiar contacts. The task description gives the agent a goal. A permission system determines which actions it may take to get there.

A Claude settings screen shows modes governing when the agent may act and when it needs approval.
A Claude permission screen reproduced by the authors illustrates where a user can choose how tightly the system checks agent actions. · Alexandra E. Michael and Franziska Roesner, arXiv:2607.13718.

Image source

Alexandra Michael and Franziska Roesner surveyed 21 proposals for user-level agent permissions and compared them with five commercial agents. Their framework separates how permissions are written or inferred from how the system enforces them. The researchers found gaps in transparency, usability and user control.

That distinction makes a product claim easier to examine. A setting can be easy to describe in the interface and still be difficult to enforce once an agent starts using tools. The survey gives readers a vocabulary for asking about both parts.

Read the source.