... recurse into another broad grant otherwise, as you say, it s turtles. I added this exact seam to the hardening matrix in issue #2: https://github.com/alexanderrada... So no: I wouldn t treat re-derivation reads as privileged or inherently safe. The trusted primitive is closer to observation with bounded effects, and when that can t be expressed, fail closed. Comment from Alexander Benz(@alexander_benz): The line I ve ended up using is authority reach, with reversibility as recovery ... ... because it's dumb, but because the radius is determined by capabilities it isn't even looking at. That's the strongest version of the "worst judge of its own reach" point I've seen. And your authority-armed-versus

... doorbell. It rings the same whether it's a package or a fire. That's basically the gap Pushary fills, same hook idea you've already wired, but the event carries a real handoff (done vs blocked vs