Tag Permission Model

Node.js permission model, updated Oct 2026: all 14 bypass CVEs fixed this year, audit mode, permission.drop(), worker rules and safe versions to run.