Permissions

The worker may inspect authorized context but cannot make changes.

A privileged action pauses the exact job and persists an approval. The authenticated decision resumes or rejects that job once; duplicate decisions replay safely.

A durable Full access grant is explicit, visible, revocable, and bound to the user, tenant, worker key, workspace scope, and policy version. A notification cannot silently create the grant.