Checks Agent invocation permissions and settles interaction waits against the original invocation facts. permissions handles admission and interaction_wait tracks pending user interaction. Public session IDs and JSON request fields cannot substitute for the captured invocation authority.