docs(B03): trace full-access command approval mismatch from live session

docs/协作/evidence/B03-01/session-permission-summary.json

@@ -0,0 +1,75 @@
+{
+  "scope": "Read-only local user-requested session inspection; only permission metadata is retained. No raw transcript, command, paths, credentials or personal session identifiers included.",
+  "observedDate": "2026-10-21",
+  "sessionPermissionMode": "full-access",
+  "sessionAgentMode": "craft",
+  "sdkPermissionModes": [
+    "acceptEdits"
+  ],
+  "approvals": [
+    {
+      "ordinal": 1,
+      "status": "answered",
+      "toolName": "Bash",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "session"
+    },
+    {
+      "ordinal": 2,
+      "status": "answered",
+      "toolName": "Bash",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "session"
+    },
+    {
+      "ordinal": 3,
+      "status": "answered",
+      "toolName": "Bash",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "session"
+    },
+    {
+      "ordinal": 4,
+      "status": "answered",
+      "toolName": "Bash",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "session"
+    },
+    {
+      "ordinal": 5,
+      "status": "answered",
+      "toolName": "Bash",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "session"
+    },
+    {
+      "ordinal": 6,
+      "status": "answered",
+      "toolName": "Bash",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "session"
+    },
+    {
+      "ordinal": 7,
+      "status": "answered",
+      "toolName": "PowerShell",
+      "requestKind": "permission",
+      "hasPersistedMatchedRule": false,
+      "hasPersistedReason": true,
+      "allowScope": "once"
+    }
+  ],
+  "rawSdkDecisionFieldsRetained": false
+}