Controlled command access.

This confidential operational surface requires authenticated identity, an applicable NDA-backed entitlement, a matching resource scope, and an active permission grant.