One durable entity reference returned by the worker. The ref itself carries no
read authority; on delivery the host verifies that projectId names the worker
(producer containment) and then mints a narrow, entity-scoped, read-only grant
to the caller for EXACTLY this (type, id), so a cross-project caller can
resolve the returned record without gaining access to the worker's other rows.
One durable entity reference returned by the worker. The ref itself carries no read authority; on delivery the host verifies that
projectIdnames the worker (producer containment) and then mints a narrow, entity-scoped, read-only grant to the caller for EXACTLY this(type, id), so a cross-project caller can resolve the returned record without gaining access to the worker's other rows.