## §OIP SYSTEM ARTICLE — ACCESS (4 operations)
A generated article for one OIP shelf. It lists every operation in this API/CLI/MCP/device/model/core subsystem, links each leaf article, and gives the ledger path for proof.

### Read Order
- scan operations
- open a leaf doc
- run via run_now or POST /api/dispatch
- open receipt
- repair/replay if needed

### Operations
- **ACCESS_DECISIONS** — The recorded context decisions — allow or deny, the named code, the device, profile and session, the policy re
  when: you want to know why something was refused or who has been exercising what.
  args: $1 = fingerprint or profile_id or device_id, optionally |how_many. Empty = the latest decisions overall.
  doc: https://miscsubjects.com/api/dispatch?key=ACCESS_DECISIONS&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=ACCESS_DECISIONS&body=cap_abc123%7C20&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=ACCESS_DECISIONS
- **ACCESS_REPORT** — The whole access picture from the live rows and from Cloudflare: the door (which Access application, every pol
  when: first, always, before saying anything about a person or the door. Again after a fix, to prove it.
  args: $1 = an email, or empty for everyone.
  doc: https://miscsubjects.com/api/dispatch?key=ACCESS_REPORT&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=ACCESS_REPORT&body=jpm%40loop.health&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=ACCESS_REPORT
- **ACCESS_FIX** — Runs exactly one repair through the same code the Users screen uses. Actions: admit (put an address on the man
  when: after ACCESS_REPORT named the finding. One action per call. Run ACCESS_REPORT again afterwards and quote what changed.
  args: $1 = action. $2 = email. $3 = company id (tenant). $4 = level: viewer, team or developer (for mint_link: read or team). $5 = label (mint_link). $6 = name (invite, new_space). $7 = code (revoke_link, revoke_share). $8 = capability (override). $9 = allow: true or false (override). Leave an argument empty when the action does not use it.
  doc: https://miscsubjects.com/api/dispatch?key=ACCESS_FIX&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=ACCESS_FIX&body=admit%7Cjpm%40loop.health&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=ACCESS_FIX
- **ACCESS_AGENT** — Knows every way a person or a machine gets into this build, what each level and each link reaches, how a compa
  doc: https://miscsubjects.com/api/dispatch?key=ACCESS_AGENT&format=markdown
  run: https://miscsubjects.com/api/dispatch?invoke=ACCESS_AGENT&body=Can%20you%20add%2C%20edit%20and%20delete%20people%3F%20Show%20me%20who%20can%20get%20in.&share=<TOKEN>
  history: https://miscsubjects.com/api/invocations?object_id=ACCESS_AGENT

### Troubleshooting
- If a row's example has placeholders, replace only the placeholder values and preserve separators.
- If a call fails, open its receipt and repair it with POST /api/dispatch {key, body, repairs:'inv_ID'}.
- If token scope denies this system, ask the owner for a row:/rows:/pfx: token scoped to the exact operation set.

Back to the tree: https://miscsubjects.com/api/dispatch?map=1&format=markdown