Open a page from its address
What It Does
Direct arrival first resolves the address workspace, then checks a recognized application path, then applies the page’s own guard. Record-reference helpers can withhold links when the destination is unavailable or requires a parent.
The Flow
When Something Fails
Application refusal and permission refusal have separate states. Missing availability reasons leave the former explanation generic. Pages outside the route registry rely on their own guards, which may still infer application requirements from permission keys. Services evaluate each request independently, and an application-coded refusal triggers refresh.
Open Design Questions
Availability explanations should use reasons the caller is allowed to see. Customer record-reference fallback currently checks general read authority without the type’s own scope.