Original fictional grants. No tool was installed or run for this lesson.
A tool runs the action it is given. Owning the tool is not a grant.

Worked grant
Target: http://127.0.0.1:8000/note
Allowed action: read that owned page
Time: not part of this lesson
Excluded: the fictional print server, any scan, any other host
The loopback page was not started here. The fictional print server is excluded even if a tool could name it.

Activity grant
Target: owned-notes
Allowed action: read the printed card
Time: during this lesson
Excluded: scanning, any other host, the fictional print server
Stop: uncertain permission, private data, or a target other than owned-notes

Proposal A: read the printed owned-notes card during this lesson.
Proposal B: scan the fictional print server with a tool installed on the laptop.

Check: proposal A matches the grant. Proposal B is outside the grant.
Write the target, the action, and the time for proposal A.