Slack tracer: explicitly confirmed exact and scoped approval rules #1048

Parent

#1019

What to build

A qualified Slack rule saver explicitly confirms supported exact or broader approval rules and can inspect their scope and creator-specific revocation in Web.

Acceptance criteria

• Use the existing rule authority and true actor/authorization provenance, with explicit rule capability and second confirmation.
• Exact match uses complete native tool input/name, PersonaBot role and Workspace Grant scope; broader all-opaque controls are separately disclosed.
• Show a real matching call, mismatching call requiring a decision, and rule-saving refusal for an actor without capability.
• Creator revocation disables its rules and controls before another effect starts; re-pairing and cross-platform association restore no rules implicitly.
• Competing callbacks and Web actions cannot create duplicated rules or expand existing authority.
• Demonstrate actual native Slack controls and canonical outcomes with retained tutorial material.
• Test through checked Provider and authenticated management/owning service boundaries; keep existing canonical persistence and no parallel content/decision authority.
• Retain real sanitized screenshots/step evidence and maintain the affected English/Chinese tutorial section; UI changes include matched baseline/changed light/dark evidence and no private secrets.
• Provide the exact-version runnable review path and focused behavioral coverage; pause for Human QA before expansion, without automatic merge/deployment.

Blocked by

• Lark tracer: explicitly saved approval rules and creator-authorization revocation #1033
• Slack tracer: verified pairing and native Allow once / Reject #1046