Permissions are a flat Role plus Principal pair (42 declarations); no Groups or RoleDefinitions. Placeholder until set-based granting is actually needed.
(empty)
(empty)
8
Deferred
DEFERRED 2026-09-23 (claude-code): covered by EST.23 (groups vs permission levels).