Implemented & verified

Defined term

Permission

An authorized capability to perform a defined action within a scope.

Reviewed: July 2026
Current state: Scoped permission evaluation and grants are implemented.

Owning boundary: Kernel authorization module
Not equivalent to: Responsibility · Account Role · Application Grant
Verified identifiers: PermissionAction

A Permission authorizes a defined action within a scope. It answers what an Actor may do, not what result they own or when their effort is reserved.