# The second permission

> A team grants an agent Question access only after it reliably uses its narrower completion-Ping permission.

- Published: 2026-08-10
- Author: PingRoom
- Theme: Agents & judgment
- Topics: scoped OAuth, AI agent permissions, Questions
- Canonical: https://pingroom.io/stories/the-second-permission
- Cover image: https://pingroom.io/stories/the-second-permission.webp
- Cover description: A user opening a second narrow red path for an agent while every other doorway remains closed

The agent connected with one permission:

Send completion Pings to the build room.

For a week, it did only that.

Then the team wanted it to ask a bounded Question when a release needed direction.

They did not give it access to everything.

The room owner reviewed the connection and added Question access.

The next release asked:

Stage or hold?

The agent could ask one new kind of question.

Every other door remained closed.