Sensitive scopes — never granted by default; the user opts in at key
creation, and execution still passes a confirm on a Pouchy-controlled
surface (see companion.confirm_request). Not every non-default scope is
opted into this way: chat.instructions is granted ONLY by the agent
template's instructions: true flag, and a mint that names it is silently
narrowed (CR-927).
Sensitive scopes — never granted by default; the user opts in at key creation, and execution still passes a confirm on a Pouchy-controlled surface (see
companion.confirm_request). Not every non-default scope is opted into this way:chat.instructionsis granted ONLY by the agent template'sinstructions: trueflag, and a mint that names it is silently narrowed (CR-927).