Every governed execution carries a short-lived, exact-scope grant pinned to an immutable sandbox profile. Expiry, revocation and attestation are enforced before runtime — nothing here is a provider claim.
Connecting to the AEP API…