Carry the caller’s permissions through every data and action boundary

The mental model interviewers reward starts one level deeper than the definition: what the concept buys you, what it costs, and the single trade-off that decides when to reach for it.

Work the concrete example end to end, then name the failure mode most candidates miss — that is the signal that you have used this in production, not just read about it.