In this post I will explain why current permissions in agents are not sufficient, and they cannot prevent the lethal trifecta issue, and how liquid types as a sandbox mechanism can address this limitation.