In Zip's architecture, an artificial intelligence agent operating on a user's behalf is restricted to the specific data access permissions of that user