Problem statement.
Muse only becomes useful once users grant broad, standing permissions. But every approval prompt pushes users toward one of two failures: clicking "yes" reflexively (a safety failure) or abandoning the task altogether (an activation failure).
How do I design Muse's permission model so it earns standing trust incrementally, reserves explicit approval for moments that genuinely warrant it, and avoids both prompt fatigue and catastrophic blind approval?