agent foundation

lib/Service/Access/AccessPolicyFactory.php

@@ -65,6 +65,8 @@ class AccessPolicyFactory
         );
     }
 
+    // Assembles all policies into a single AuthorizationService.
+    // Policy order doesn't matter — each ability maps to exactly one policy via supports().
     public function createAuthorizationService(): AuthorizationService
     {
         return $this->authorizationService ??= new AuthorizationService([