—Capability tier overview
—T0 Observe -- read-only streams (always allowed)
—T1 Inspect -- views, measurement, analysis
—T2 Automate -- exports, rendering, custom commands
—T3 Modify -- model changes (requires confirmation)
—T4 System -- save, sync, project settings
—T5 Admin -- delete, purge, close