Permission Security Invariants

The system must guarantee:

1. Revoked permissions cannot execute.
2. Expired permissions cannot execute.
3. Unauthorized executors cannot execute.
4. Asset restrictions cannot be bypassed.
5. Chain restrictions cannot be bypassed.
6. Destination restrictions cannot be bypassed.
7. Spending limits cannot be bypassed.
8. Strategy scope cannot be bypassed.
9. Replay cannot execute.
10. Invalid states fail closed.