Gemini Desktop is testing a Full Access mode that lets the agent run file operations and network calls inside a sandbox, asking for consent only on sensitive actions. Read it alongside Apple's Full Disk Access change the same week: the platforms are converging on 'agents get broad access, with a consent layer the OS controls'. Products that assume their own permission model will have to map onto the platform's.