# Actors and Boundaries

Audience: AI coding agents first.

| Actor | WordPress authority | Reachable plugin surface | Boundary evidence |
|---|---|---|---|
| administrator | `manage_options` | Admin SPA, protected plugin REST mutations, onboarding, licensing, migration | `includes/Admin/MenuController.php:156`, `includes/API/LanguagesRestController.php:736` |
| authenticated reader | `read` | Read-only language REST routes | `includes/API/LanguagesRestController.php:728` |
| anonymous | none | Public frontend language output only; protected admin and mutation routes denied | `includes/Admin/MenuController.php:156`, `includes/API/LanguagesRestController.php:736` |

Use capabilities as authority. Never derive access from role slug.