What if the company has provided the harness, tool execution environment, MCP servers, and LLM provider subscription for the employee to use? What if the company has provided a set of skills and other prompt context that could lead to undesirable behavior in certain unforeseen circumstances? What if the permission prompt the user sees 30 dozen times a day looks like, "OK to execute this random shell script?"

Accountability really is hard in this new world.