A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is resilience policy.
Repair the resilience policy access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Cloud-native full-stack / resilience policy.
- Observed failure family: enforce permission rules.
- Scope policy: contractVersion must equal 2.