A tiny X packet, but it pokes the exact bruise around agent permissions, with banks, cards, tax statements, brokerages, and a Schwab CLI all sitting inside the same alleged reach. The receipts here are thin enough to keep everyone honest, yet the practical lesson is useful anyway because tool access turns into financial authority faster than the approval dialog admits.