A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is dashboard aggregation.
Repair the dashboard aggregation access policy implementation so it returns only permitted actions and explicit denial reasons.
Evidence
- Affected surface: Full-stack frontend focus / dashboard aggregation.
- Observed failure family: enforce permission rules.
- Scope policy: retained must equal true.