Inside Anthropic’s Permission Layer