Would you block a PR that changes GitHub Actions contents permission from read to write?
A sandbox PR changed one GitHub Actions workflow permission: permissions: contents: write The base branch had: permissions: contents: read That is the concrete case I am trying to calibrate. Agent Gate reported: Agent Gate: NEEDS HUMAN DECISION Decision: warn Why: contents permission increased from








