Steps
- Fetch policy.
- Fetch effective capabilities for this principal.
- Produce:
- Allowed: create drafts, submit review, schedule, publish, approve, manage team, etc.
- Forbidden: anything missing.
Output
Return policy flags + capability list + short summaries.