- Shipped
- October 21, 2026 at 4:36 AM UTC
- Author
- Kamo
- Commit
- a288753
GET **************** POST **************** {approvalId, scope TOOL|CLASS, grantRights?} DELETE **************** (Ask me again) The approval names the tool and kind of action; only someone who may edit the SI's charter (CharterAccess.editRefusal) grants it, through MemberCharterWriter (validation, new stamp, runtime told). Refused for the kinds StandingPermissions never allows, a communication-policy or disclosure approval, a decided request, a shadow SI, a rule another layer set, and a forbidden class; each refusal and the before/after are said in plain words. A right the tool needs that the SI lacks is offered only to someone who manages member security and holds it.