pub fn compile_permission_constraint(
action: u64,
principal: u64,
target: &NQuin,
) -> NQuinExpand description
Compile a permission into a non-fungible cryptographic constraint bound to a specific
target nquin: the constraint carries, in context, a BLAKE3 binding to target, so the
permission cannot be detached and reused for a different nquin — it travels persistently with
that exact one. The identity layer SIGNS this envelope (the engine never holds keys — see
meta_deontic::endorsement_credential); this constructs the bound, verifiable constraint.