Application-owned tenant/scope authorization. Required and fail-closed.
Entity/action/field allowlist. Missing entity types fail closed.
Optional
Inject a store for isolation/testing; defaults to the canonical graph.
Required at runtime for destructive replace and remove actions.
replace
remove
Application-owned tenant/scope authorization. Required and fail-closed.