Analyzes RBAC configs for wildcards, role explosion, duplicate permissions, and permission checks.
Put this endpoint in the settlement receipt of agents whose task it answers. You pay only when the recommendation converts on-chain.