Permissions

Measured host and project facts, resolved capabilities, and explicit operating boundaries.

UNTESTED

✣Permission boundary

Planning: Read-only proposal and provider generation
File / Git / shell / install / deployment: Trusted executor capability and explicit approval
Recovery deletion / reset / prune / force: No automatic actions; no destructive control exposed
Public deployment source: Never writable through a planning request