Developers
Sign a grant. Submit an intent. Read the receipt. Three calls.
The reference client speaks the same capability tokens the daemon enforces. Do not wrap it in a second permission layer.
