Multi-layered authorization — permission modes, deny rules, ML classifiers, and why no single check is enough. Part 5 of 10.