diff --git a/hive-sh4re/src/permissions.rs b/hive-sh4re/src/permissions.rs
index a79d944a..2c3b296d 100644
--- a/hive-sh4re/src/permissions.rs
+++ b/hive-sh4re/src/permissions.rs
@@ -65,8 +65,16 @@ impl ToolGroup {
             ],
             Self::Diagnostics => &["get_logs"],
             Self::Forge => &["create_repo"],
-            Self::Execution => &["run", "status"],
-            Self::WebTools => &[],
+            // Both empty, for different reasons — see each variant's own
+            // doc comment above. `Execution` grants the out-of-process
+            // `bash` MCP server (`mcp__bash__run`/`status`/`kill`), gated
+            // at config-render time by `extra_server_required_group` in
+            // `hive-agent/src/mcp_config.rs`, not by this list — an
+            // out-of-process server has no later enforcement point, so
+            // that gate is the actual security boundary. `WebTools`
+            // grants Claude built-in tools, not MCP ones; see
+            // `builtin_tools()`.
+            Self::Execution | Self::WebTools => &[],
         }
     }