Your agent had permission. That wasn't the problem.

Permissions are point-in-time.
Agent behavior is a sequence.

Mercator TrueBearing™ enforces behavioral sequence policies on agent tool calls