Gemini CLI runs commands and edits files from your terminal, Gemini Code Assist agent mode does the same in VS Code and JetBrains, and the run-gemini-cli GitHub Action runs it in CI. All of them act with the permissions they’re given.
Since June 18, 2026, consumer tiers use Antigravity CLI instead, but for Code Assist Standard and Enterprise “your access remains unchanged” (Google). This post is for those organisations: what goes wrong, the incidents, their impact, and the controls that work.