The one rule every lake-facing identity check (guard previews/pre-flights, $can grant filters) must resolve through to agree with the lake's own identity(); binding actor.id directly at a lake edge reintroduces the divergent-identity mismatch.
$can
identity()
actor.id
The one rule every lake-facing identity check (guard previews/pre-flights,
$cangrant filters) must resolve through to agree with the lake's ownidentity(); bindingactor.iddirectly at a lake edge reintroduces the divergent-identity mismatch.