> What I need is a permission layer for agents, not the programs they create; TCC is operating at the wrong level of abstraction.

Or... you are operating your computer at the wrong level of abstraction. It was made for use by a real intelligence.

We already have all these permission layers too. SELinux and Windows NT have existed for a long time.

So has macOS. It’s just a matter that the agents don’t bother to use the existing permission layers.