Commits on May 7, 2026 permissions: introduce typed actions and data labels (foundation) This is the first concrete step of the new permission system described in docs/PERMISSIONS.md. It lays the typed-action vocabulary and the information-flow label registry that subsequent commits will route every API call through. Adds: - extension/src/policy/actions.ts: TYPED_ACTIONS registry of verb.noun.qualifier actions, each carrying effect, locality, reversibility, default data labels, accepted labels, and default TTL. Splits model.prompt into local / remote.firstParty / remote.thirdParty and network.egress into same_origin / cross_origin so the policy engine can reason about locality, not just shape. - extension/src/policy/labels.ts: DATA_LABELS registry plus a LabelSet runtime carrier with union/intersect/subset and propagation rules. Includes destinationAcceptsLabels(), the gate the engine calls at Tier 3 of the policy ladder.…