- deduplicate the thrice-repeated refusal block into
GatewayDispatch::ownership_wiring_refusal(&self, op)
- drop the dead unwrap_or("") branch in the refusal predicate
(let-else: the internal-visibility exemption and the resource_type
predicate are now separate lets)
- pin the predicate refinement review 012 ruled on: a list-case op
(resource_type set, resource_id_path None) is refused on an unwired
spine and served through owns_any when a provider is wired
Verification: cargo test (697), cargo test --all-features (721),
clippy all-targets both configs, fmt --check
glm-5.3-flash
1fda0d8587