Canonicalize and authorize one exact operation before its side effect.
Drop once/session authority when its owning connection ends.
Dry-run the exact shared evaluation without consuming a once grant.
Add authority beneath the administrator ceiling.
Replace ceilings without restarting the MCP process.
Replace grants derived from the currently loaded administrator ceiling.
Atomically replace reloadable ceilings and persisted grants.
Atomically replace optional persisted project grants.
Revoke authority immediately for subsequent operations.
Stateful owner for permission evaluation, consumption, reload, and revoke.