I ship eight small Chrome extensions under Legacy Tools. They are all

Manifest V3, and they all need some form of access to the pages you

visit — that is what tools that check things before you send them do.

I have written before about the rules I give AI agents

so they never broaden permissions on their own. This post is about the