Right now purely file level. But the dependency analysis is really intelligent and we'll figure out what that would look like.

The long-tail point is true. We don't do any tracking in our implementation, but we've been trying hard to refine our total our total permissions approach to think about more edge cases such as this, while not being too annoying. We think this is a general tricky issue with AI alignment ('do what I mean not what I say').