OAUTH_SCOPE was a hardcoded constant; it is now an optional env var falling back to 'atproto transition:generic'. The granular value ('atproto include:page.mooring.authSite blob:image/*') sits commented in wrangler.jsonc: once the lexicons are published and _lexicon.mooring.page resolves, the flip is a config deploy, and a PDS that can't resolve the permission set is handled by reverting the var rather than a code rollback. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>