Two event steps over the permission catalogue, picked by plugin then
permission: rust.perm.lend (until the run ends, a kit reward's lease) and
rust.perm.give (for good, a standing grant, irreversible). Several
permissions per step through a new `multiple` action-param flag in core
(MODULE_API 1.14.0). No blocklist; a required "I am sure" toggle instead.
No plugin, sidecar or protocol change.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY