ai-coding-agents-permissions

# AI Coding Agents Permissions Use this skill to design or review the approval system for a coding-agent runtime: tool permission modes, plan-mode entry and exit, sandbox escalation, background-agent auto-deny behavior, and leader-worker permission routing. This skill owns approval architecture for coding agents. For general hooks or callback automation, use [`../agents-hooks/SKILL.md`](../agents-hooks/SKILL.md). ## ASCII Flow ```text tool/action request | v permission context mode + actor + sandbox + tool + path + remote/local + worker role | v policy route allowlist | ask rule | deny rule | managed policy | plan-mode gate | v decision allow -> execute ask -> prompt owner or lead session deny -> return structured refusal log -> trace permission reason ``` ## Quick Reference | Question | Read | Outcome | |----------|------|---------| | How should permission state live in the runtime? | [`references/permission-runtime-model.md`](references/permission-runtime-model.md) | Central permission context, mode handling, and host-owned rules | | How do local, remote, and swarm approvals differ? | [`references/permission-routing-local-remote-and-worker.md`](references/permission-routing-local-remote-and-worker.md) | Approval flows for REPL, remote sessions, and leader-worker teams | | How does OpenAI Codex model split filesystem policy and `request_permissions`? | [`references/openai-codex-request-permissions-and-split-policy.md`](references/openai-cod...