Exact permission identifiers granted by this policy snapshot.
Stable version or hash identifying the policy snapshot used. Must be non-blank, at most 200 characters, and free of ASCII control characters; anything else is malformed output and fails closed.
The server-derived permissions for one trusted execution principal.