PE12 — [mutation] a provider that THROWS (asynchronously, the normal failure mode) must not
crash the aggregate. GetAllUserPermissions fans out with Promise.allSettled, so one broken
domain degrades to "contributes nothing" rather than rejecting the whole call — which would
black-hole the Sharing Center and the audit surface for every user.
PE12 — [mutation] a provider that THROWS (asynchronously, the normal failure mode) must not crash the aggregate.
GetAllUserPermissionsfans out withPromise.allSettled, so one broken domain degrades to "contributes nothing" rather than rejecting the whole call — which would black-hole the Sharing Center and the audit surface for every user.