Every note that touches permissions, newest first.
A proposed permission ladder separates observation, diagnosis, approval, remediation, verification, and reversal so incident automation can gain authority one bounded action at a time.
