OptionalnamePolicy name used in denials and audit records.
OptionalwriteSide effects treated as write-class — background execution denied for these. A write / destructive / idempotent connector carries a side effect whose approval topology and timing the background flip would move off the foreground path, so v1 keeps them foreground-only. Default: everything but 'read'.
Configuration for backgroundExecution.