kagent SandboxAgent has a native domain allowlist as well as role and tool bindings. MCP server credentials and resource-level rules still need their own native policies. Keep each permission in the existing format that actually enforces it.

Moved to https://andy.smith.wiki/3mwntvfkpana5/