Supervisor capabilities
SUPERVISOR| Capability | Allowed | Code gate |
|---|---|---|
| Everything a superintendent can do | ✅ | — |
| Approve / reject drafts | ✅ | canApproveDrafts |
| Batch approve | ✅ | canApproveDrafts |
| Teach Model | ✅ | canTeachModel |
| Knowledge Base entries (read + write) | ✅ | canAccessKB |
| RAG retrieval graph | ✅ | canAccessRagGraph |
| Class & Flag Documents wizard | ✅ | (admin + supervisor) |
| CL Skeleton wizard (start build) | ✅ | (admin + supervisor) |
| CL Remap (advisory drafts) | ✅ | (admin + supervisor) |
| Quarantine review | ✅ | (admin + supervisor) |
| User management | ❌ | canManageUsers (admin only) |
| Vessel onboarding | ❌ | canManageFoundation (admin only) |
| UCS Foundation activate / propose | ❌ | canManageFoundation (admin only) |
| Cascade preview / apply | ❌ | canManageFoundation (admin only) |
| Backups & restore | ❌ | canManageBackups (admin only) |
| Drawings registry mutation | ❌ | canManageFoundation (admin only) |