The caller's company-scoped capability matrix, computed server-side (lib/permissions.ts, documented in docs/concepts/permissions.md). Each flag says whether the UI may OFFER a gesture — it never grants one: every route keeps its own guard and answers 403 regardless. Rights that depend on the object rather than on the member are served by the object instead (canManage on an agent, canArchive on a project, canEdit on the org chart).
No recorded changes to this operation across all 2 revisions of this API.