tool permissions — The rules governing which tools an agent may call and which need confirmation — the boundary between a mistake and an incident.
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
Why it matters
Teams get Claude Code inside the same subscription as Claude, and admins get enforceable policy settings for tool permissionsThe rules governing which tools an agent may call and which need confirmation — the boundary between a mistake and an incident.Full definition → and file access plus per-user spend limits, which is what makes a coding-AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition → rollout governable.
