Instead of requiring write permissions, autonomous mode attempts writes and gracefully falls back to recommendations when denied. Report splits into Applied (succeeded) and Recommended (could not write) sections. Read-only invocations produce a maintenance plan.