// Package resourceaccessv1 defines the neutral Runtime resource ACL
// administration contract. Authorized resource collection and point reads stay
// on Runtime Query and record authorization, the single visibility read path.
// Mutation admission atomically binds (CommandID, CommandDigest(request)) to a
// durable terminal Response: an equal replay returns that prior response, while
// reusing the identity for a different digest fails with Conflict. The binding
// must survive process restart.
package resourceaccessv1