You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.257,
ImprovementsSection of the release
If a session-rule re-check after an ask-first approval no longer matches the previously-granted rule, the call is now refused with a distinct approval_no_longer_covers error code and message instead of the generic denied-by-session-rule path.
