StrictLLM Permission Tier Ladder

StrictLLM's Always Allow, Always Ask, and Always Deny tool permissions give agencies a way to price deployment by risk exposure rather than seat count. Map each client persona to a tier: Always Deny for read-only research personas, Always Ask for workflows touching client CRM or billing data, Always Allow only for sandboxed MCP servers in isolated Podman containers. The Starter plan at $29 monthly caps you at 3 personas, so a solo client engagement fits one tier; Pro at $79 monthly removes the persona limit and adds remote and mobile access, which matters when a retainer requires after-hours approval chains. Enterprise adds audit logs for compliance, the tier that justifies a higher setup fee. In practice, a pilot client with two Always Ask personas and one sandboxed MCP server can be scoped as a fixed-fee deployment, while an Always Allow workflow demands written client sign-off and a documented rollback path before delivery begins.