The way out
The grant, measured, not assumed: what the agent can actually do.
For every row beyond its purpose: a boundary, a setting, an expectation, or nothing.
With a name, a date and an expiry, that can be suspended.
Each level unlocked by evidence that the one below held.