capability: null has been in this response since slice 1, with a comment saying it stays that way until there is a worker whose reach a grant can bound. The desk at gate.regarde.io now mints one on an allow, so the null is no longer the honest answer — it is just stale. What arrives is narrow by construction: the approved source categories and outputs, a hash of the exact scope it descends from, and ten minutes of life. No distribution, no marketing, no merchandise, no training — those govern a finished bundle rather than what a worker may touch, and a generation worker is the wrong place to enforce them. An edit still carries nothing. The counter is an offer the player has not taken, and authority on the strength of terms nobody accepted is the failure this wall exists to prevent. Still no worker consumes it. It is passed through rather than withheld because the next stage binds to it, and because a player told "allowed, and recorded" should be able to see the shape of what they permitted. Cherry-picked from oskiewar-netplay-saber (b0407cda). Its two new tests stay on that branch with the rest of the consent suite, which is not on main yet. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>