diff --git a/Cargo.lock b/Cargo.lock
index d74b7ae85..b591b5d20 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1822,7 +1822,7 @@ dependencies = [
  "libc",
  "option-ext",
  "redox_users",
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -1936,7 +1936,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -3789,7 +3789,7 @@ dependencies = [
  "js-sys",
  "log",
  "wasm-bindgen",
- "windows-core 0.62.2",
+ "windows-core 0.61.2",
 ]
 
 [[package]]
@@ -4599,7 +4599,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -5181,7 +5181,7 @@ checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
 [[package]]
 name = "petri-attractor-steps"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "globset",
@@ -5212,7 +5212,7 @@ dependencies = [
 [[package]]
 name = "petri-driver"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "getrandom 0.3.4",
@@ -5232,7 +5232,7 @@ dependencies = [
 [[package]]
 name = "petri-engine"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "petri-ir",
  "serde",
@@ -5244,7 +5244,7 @@ dependencies = [
 [[package]]
 name = "petri-execution"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "petri-driver",
@@ -5268,7 +5268,7 @@ dependencies = [
 [[package]]
 name = "petri-executor"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "libc",
@@ -5283,7 +5283,7 @@ dependencies = [
 [[package]]
 name = "petri-executor-sandbox"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "petri-executor",
@@ -5305,7 +5305,7 @@ dependencies = [
 [[package]]
 name = "petri-frontend"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "marked-yaml",
  "petri-ir",
@@ -5319,7 +5319,7 @@ dependencies = [
 [[package]]
 name = "petri-frontend-attractor"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "minijinja",
  "petri-frontend",
@@ -5336,7 +5336,7 @@ dependencies = [
 [[package]]
 name = "petri-frontend-fabro"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "petri-frontend",
  "petri-frontend-attractor",
@@ -5351,7 +5351,7 @@ dependencies = [
 [[package]]
 name = "petri-frontend-native"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "petri-frontend",
  "petri-ir",
@@ -5362,7 +5362,7 @@ dependencies = [
 [[package]]
 name = "petri-ir"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "regex",
  "serde",
@@ -5375,7 +5375,7 @@ dependencies = [
 [[package]]
 name = "petri-runtime"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "petri-driver",
@@ -5396,7 +5396,7 @@ dependencies = [
 [[package]]
 name = "petri-steps"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "petri-executor",
@@ -5412,7 +5412,7 @@ dependencies = [
 [[package]]
 name = "petri-store"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "getrandom 0.3.4",
@@ -5427,7 +5427,7 @@ dependencies = [
 [[package]]
 name = "petri-testkit"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/petri.git?branch=main#25d8bf3b9a5a9f722cdf430aae74522228eb4e19"
+source = "git+https://github.com/lithoscomputer/petri.git?branch=main#165c6ba4b6e928ec10a01688bf85de4bc5418233"
 dependencies = [
  "async-trait",
  "petri-driver",
@@ -5766,7 +5766,7 @@ dependencies = [
  "once_cell",
  "socket2",
  "tracing",
- "windows-sys 0.60.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -6214,7 +6214,7 @@ dependencies = [
  "errno 0.3.14",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -6273,7 +6273,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -6318,7 +6318,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "async-trait",
  "futures-util",
@@ -6338,7 +6338,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-daytona"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6366,7 +6366,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-daytona-config"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "sandbox-driver-docker-config",
  "serde",
@@ -6376,7 +6376,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-docker"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6397,7 +6397,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-docker-config"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "serde",
  "serde_json",
@@ -6406,7 +6406,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-host"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -6424,7 +6424,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-protocol"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "async-trait",
  "base64",
@@ -6441,7 +6441,7 @@ dependencies = [
 [[package]]
 name = "sandbox-driver-testing"
 version = "0.1.0"
-source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#9d42465a975ac5b82c7b2d36f488262ff6af4403"
+source = "git+https://github.com/lithoscomputer/sandbox-driver?branch=main#0fe4af55c9ddb3887cbcbf6e78d24490501df047"
 dependencies = [
  "async-trait",
  "sandbox-driver",
@@ -6926,7 +6926,7 @@ version = "1.4.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
 dependencies = [
- "errno 0.2.8",
+ "errno 0.3.14",
  "libc",
 ]
 
@@ -7404,7 +7404,7 @@ dependencies = [
  "getrandom 0.4.1",
  "once_cell",
  "rustix",
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -7439,7 +7439,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "230a1b821ccbd75b185820a1f1ff7b14d21da1e442e22c0863ea5f08771a8874"
 dependencies = [
  "rustix",
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -8486,7 +8486,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
diff --git a/lib/apps/fabro-cli/tests/it/cmd/attach.rs b/lib/apps/fabro-cli/tests/it/cmd/attach.rs
index 06b8e73b2..518da59da 100644
--- a/lib/apps/fabro-cli/tests/it/cmd/attach.rs
+++ b/lib/apps/fabro-cli/tests/it/cmd/attach.rs
@@ -1441,6 +1441,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1504,6 +1505,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1593,6 +1595,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1697,6 +1700,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1759,6 +1763,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1815,6 +1820,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1882,6 +1888,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -1974,6 +1981,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -2054,6 +2062,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -2125,6 +2134,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -2184,6 +2194,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
                   "kind": "attractor/human",
                   "meta": {
                     "label": "Approve?",
+                    "permissions": "full",
                     "shape": "hexagon",
                     "kind": "human",
                     "classes": [],
@@ -2233,6 +2244,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2302,6 +2314,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2361,6 +2374,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -2405,6 +2419,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2454,6 +2469,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/stage",
               "meta": {
                 "label": "Start",
+                "permissions": "full",
                 "shape": "Mdiamond",
                 "kind": "start",
                 "classes": [],
@@ -2521,6 +2537,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2592,6 +2609,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2657,6 +2675,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2716,6 +2735,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2823,6 +2843,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],
@@ -2882,6 +2903,7 @@ fn attach_json_errors_without_prompting_for_human_input() {
               "kind": "attractor/human",
               "meta": {
                 "label": "Approve?",
+                "permissions": "full",
                 "shape": "hexagon",
                 "kind": "human",
                 "classes": [],