Cool project. The convenience gap is the real problem here: it's so easy to give agents way more access than they need that most people don't bother scoping anything. Tools like this that make least-privilege the default are going to matter a lot.