[2026-05-04T02:45][v2_0245_0504] AI Agent权限分级方案：用HolySheep区分只读查询、低风险写入和需人工审批的高危动作