Steps
- •Fetch policy.
- •Fetch effective capabilities for this principal.
- •Produce:
- •Allowed: create drafts, submit review, schedule, publish, approve, manage team, etc.
- •Forbidden: anything missing.
Output
Return policy flags + capability list + short summaries.