Gates

Answers: permission matrix, rate counters, MFA map

Governing rule

Refuse the giant roles×permissions matrix as the entry point — inquire from principal or from flow.

What this panel shows

Gate chain in evaluation order — where a 403 stopped.

Continuous audit: public user-plane flows after deploy.

Permission widening caught from Manifest Diff.

Operator holding an application scope is a violation.

full

limits if `overridable`