Tasks
Tasks require an authenticated workspace.
Controlled Tasks, the decisions recorded against them, and their evidence belong to a workspace membership.
Kizma resolves workspace access on the server. Nothing on this surface is returned until a session and an active membership are verified there.