The three-layer model (WP caps → space roles → trust levels) is powerful. The risk is configurability becoming overwhelming.
Where is the line between flexible and confusing? I would rather have good defaults than a hundred toggles.
How granular should the permission system get?
1