Local-first permission gateway for AI agents with scoped connector access, human approva…