Credential review
The red sample is ordinary positioned content and clips at the viewport. The Popover follows its own anchored-layer contract.
Ordinary positioned note
Confirm the token owner and intended service boundary.
Review the current scopes before granting another permission.
Credential scope
Grant only the permissions this worker needs.
Record the approval before rotating the credential.
Archive the previous key after the overlap window closes.