UC-17 · Group D — Level 3 · Granted Operation
The permission surface shrinks
Standing permissions shrink to read-only slices; the power to act arrives only as short-lived permission slips — operational grants.
The entitlement slice envelope before and after Level 3: standing read slices per charter, standing action authority approximately zero — reporting red by construction at a token-tier gate — and grants joining the envelope as ephemeral members, distinguished only by the standing/ephemeral flag.
The same semilattice accounting, segregation-of-duties, certification, and evidence machinery applies to grants unchanged. Excess authority is structural, not judgmental.
Canned EntitlementSlice envelopes render standing blast radius computed over standing slices and potential blast radius adding what the MintingPolicy would permit (this is the one scene where that term is correct); a live GET /granted-operation/grants garnish shows real GrantStatus transitions across the envelope: ISSUED, CONSUMED, EXPIRED_UNUSED, DENIED.
“The same semilattice accounting, segregation-of-duties, certification, and evidence machinery applies to grants unchanged. There is nothing new to trust.”