Permissions

Subscriptions are opt-in and reversible. Notification action buttons are deep links only: they cannot sign, spend, grant capabilities or bypass Wallet. Watchlists and delivery endpoints should remain private by default.