Retry history can inherit an unintended write-permission gate

When evidence retry history is unavailable to otherwise authorized viewers, inspect both the history endpoint and the client query condition for reuse of retry-request authorization. Sharing a write-role gate can suppress the entire history before image-level visibility rules are evaluated. Separate read eligibility from retry mutation eligibility, preserve the existing load scope and photo redaction on reads, and retain the privileged gate for creating retries. Changing image visibility alone cannot overcome an earlier role rejection. This is a code-supported mechanism; deployed behavior and organization configuration still require live verification. Applies when: Viewers can access a load but cannot inspect its evidence retry history. Keywords: evidence photos retry history permissions authorization read write role redaction