Software-Design

You find an over-restriction because something legitimate breaks and points at the spot, and it breaks earlier the earlier you encode the rule. You do not find an over-permission the same way, because nothing legitimate ever exercises it. Here is the asymmetry, a worked example, and where it stops being true.

The execution boundary determines everything: features that need the system alive belong in the platform (OSS). Features that analyze artifacts after shutdown become the product (commercial). A framework for clean OSS/commercial separation.