Field Note 011 frames permission drift as access that survives longer than its reason. Where should a community look first: admin users, integrations, recovery paths, or shared spaces?