Whether a run under scope may spend a credential from source. Every credential-scope decision
goes through here, so adding an AICredentialScope value is a compile error in this switch
until it is answered — never a value that silently behaves as 'Any' at a call site that compared
against 'RuntimeOnly'. A value outside the type (an untyped caller) throws, failing closed.
Whether a run under
scopemay spend a credential fromsource. Every credential-scope decision goes through here, so adding an AICredentialScope value is a compile error in this switch until it is answered — never a value that silently behaves as'Any'at a call site that compared against'RuntimeOnly'. A value outside the type (an untyped caller) throws, failing closed.