420 AI permissions

Submitting/funding an AI request requires the requester's Wallet authorization and applicable scoped capabilities. Provider actions are limited to their registered provider/job role; verification and settlement paths require their explicitly bound authorities.

AI provider identity never grants arbitrary Smart Account permissions. Matching may narrow request constraints but cannot broaden spend, provider/resource, privacy, deadline or verification limits.