Engineering
Your agent's approval gate is a SHOULD, and nobody read the capitals
Anthropic measured its own permission prompt, found 93% approved, called it approval fatigue and built something else. The MCP consent requirement everyone quotes is lowercase, and a gate with no timeout is an incident.