A permission is the right to approve one kind of action that can't be undone, like paying an invoice or signing a contract. Each permission lists the people who hold it, and everyone can see that list. It is the only authority in the company: a title or seniority gives none. An AI agent gets exactly the permissions of the person it works for.
Each permission lists who holds it, in a file anyone on the team can read.
If you hold it, you decide. If not, you ask the person who does. Your title doesn't matter.
If you can approve $500, your agent can too. Never a dollar more.
Only these actions wait for someone's yes, because they can't be undone. Everything else, anyone just does, with no approval.
npx noroles