What it actually costs, why an idle session keeps spending, and the security model underneath every permission prompt — including the sentence about what it does not protect you from.

The budget every other chapter spends. What is already in the window before you type, what each file read costs, what compaction keeps and drops, and why the prompt cache makes a mid-task model switch more expensive than it looks.