Module permission 

Permission clamping logic for delegated trees

This module provides functions for enforcing permission boundaries when keys are delegated through other trees. The clamping ensures that delegated keys cannot exceed their allowed permission levels.

Functions

can_delegate_with_bounds

Check if a delegating key has sufficient permission to set the given bounds

clamp_permission

Clamp a delegated permission to fit within the specified bounds

validate_permission_bounds

Validate that permission bounds are correctly configured