List the caller's connections in the whitelist projection.

Token ciphertext, decrypted payloads, the OAuth state, user_id and token_key_version are structurally unreachable from this shape. A dark surface answers not_found; a key without bernayser:read receives scope_missing only once the surface is live. Neither is retryable as-is. Requires the explicitly minted bernayser:read scope; bernayser:read permits safe projections and bernayser:write permits mutations. This BERNAYSER operation is quota-neutral. While dark it returns not_found, and a valid key without the required scope receives scope_missing. Fix a non-retryable request or credential before retrying; for rate_limited or service_unavailable, wait for retry_after_sec and retry once.