Plan-To-Permission Agents Need Scope Diff Screens

This is the failure mode short-lived capability grants are meant to solve, and the instinct is right — time-bound tokens beat standing permissions, no argument there. But short-lived doesn’t mean narrow. A 15-minute grant to s3:* is still a 15-minute grant to s3:*. The missing piece isn’t duration. It’s the operator surface that shows what the token actually authorizes, next to what the plan said it would do.