One permission gate
Every tool, hook and check goes through one permission gate. Approve gated actions one by one, or write rules that approve them for you.
Describe a task and Z Engine reads files, runs commands and edits code, asking for your approval before gated operations.