✳ AuthNZ Lab Policy-constrained execution & partition-owned leases