Changeset 0.29.1 (#196)

docs/ICD/enums.md

@@ -254,6 +254,21 @@ Permissions are granted via groups. The `Everyone` group
 permissions to all authenticated users. It is system-seeded
 and editable by admins.
 
+## Extension Permissions (v0.29.0+)
+
+7 extension permission constants, `domain.action` convention.
+Declared in package manifests, granted by admin review.
+
+| Permission | Module | Since |
+|-----------|--------|-------|
+| `secrets.read` | `secrets` | v0.29.0 |
+| `notifications.send` | `notifications` | v0.29.0 |
+| `filters.pre_completion` | — | v0.29.0 |
+| `api.http` | `http` | v0.29.0 |
+| `provider.complete` | `provider` | v0.29.1 |
+| `db.read` | `db` | future |
+| `db.write` | `db` | future |
+
 ## Policies
 
 | Key | Default | Description |