List permission asks
Lists permission asks, by default the pending ones — actions waiting on a human decision. Pending asks also arrive as permission-asked events; this list is the poll/recovery path for clients that reconnect.
Authorizations
Enforced on every transport, with no exempt operation. A person's request — over the default local unix socket exactly as over a TCP listener — must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011. The socket's file permissions are transport and are not an authorisation.
Query Parameters
Opaque pagination cursor from a previous page's nextCursor or prevCursor.
1024Maximum items per page.
1 <= x <= 100Filter by ask status.
pending, decided, expired 
