A LOCAL author-time escalation check for one agent's direct children: a child may not DECLARE a permission its
immediate parent does not grant (under intersection it would be silently dropped — flag the author's confusion /
a confused-deputy attempt). Used by the linter; the transitive picture is analyzeScopes.
A LOCAL author-time escalation check for one agent's direct children: a child may not DECLARE a permission its immediate parent does not grant (under intersection it would be silently dropped — flag the author's confusion / a confused-deputy attempt). Used by the linter; the transitive picture is analyzeScopes.