Permissions cover filesystem, shell, Git, network/MCP, and external actions. Nova applies them through capability exposure and approval rather than trusting prompt wording.
Ask Nova to inspect before editing, review proposed tool calls, and keep credentials outside the workspace. Configure organisation or project policy through supported controls.