Skip to content
Back to all posts

Why a published listing is not a permission

Discovery, authorization, and execution are three different checks — and that is intentional.

Share this article:
Trust boundary illustration

Anyone can browse public listings. Running still requires identity, tenant policy, release availability, schema validation, budget, and rate limits. Separating these layers keeps the Market honest and the platform safe.