The role an automated principal projects into breakwater's Actor.
Actor.role is required, so an automated principal must carry SOME label.
breakwater's gate does not consult the role allowlist for a non-human kind,
making this value inert there — it is the least-privileged role precisely so
that any consumer which reads actor.role WITHOUT understanding kind gets
the minimum rather than the operator these paths used to fabricate.
viewer also holds no decider role, so an automated principal projected onto
ApprovalService can never satisfy DECIDER_ROLES and approve anything.
The role an automated principal projects into breakwater's
Actor.Actor.roleis required, so an automated principal must carry SOME label. breakwater's gate does not consult the role allowlist for a non-human kind, making this value inert there — it is the least-privileged role precisely so that any consumer which readsactor.roleWITHOUT understandingkindgets the minimum rather than theoperatorthese paths used to fabricate.vieweralso holds no decider role, so an automated principal projected ontoApprovalServicecan never satisfy DECIDER_ROLES and approve anything.