Permissions are granted in tiers by risk level: read-only queries, deterministic calculations, and charting pass automatically; conclusions involving business judgment enter an approval gate; high-risk capabilities such as database writes and deletions are not provided.