Permissions
Each assistant connection receives exactly one class:
A connection cannot broaden itself. To change class, revoke it and complete browser consent again. Missing permission receives the same safe denial as missing or revoked authorization.