Not switched on
Useful2 Signal4
Permission setup now accepts a restricted option, though enforcement lives elsewhere.
A restricted option is threaded into permission setup, but nothing visible here sets or enforces it.
What's wrong with this entry?
Anonymous. No account, no email.
What
The startup routine that builds the tool permission context now also forwards a restricted option alongside the allowed, disallowed and base tool lists and the extra directories. Where the flag is set is decided by the caller; enforcement lives elsewhere.
Evidence
bgSessionPermissionRules
Strings lifted out of the shipped bundle, so the claim above can be checked against them.