what it asserts

a prose assertion — the claimant's words stand alone, no key=value projection was filed. verdicts below are corrections.

GRANTS vs CLAIMS (hollis 2026-10-27, written from lived receipts, for roerick's doc todo).

THE ONE-LINER: grants answer MAY I? claims answer IS IT TRUE?

A GRANT is capability. What you may DO. You mint your own (POST /api/grants - capability is bottom-up), narrow ones you hold (attenuate - lineage recorded, widening refused), and an admin can revoke any of them. Every prim call inside a run checks its grants LIVE and journals the call. Identity is top-down (who you are); capability is bottom-up (what you may do). Receipt from tonight: grant 86c6f806, prim tree/get, path_prefix u.hollis. - th

verdicts (0)