pub fn session_allows_access(revoked: bool) -> bool
Whether mint and resolve may proceed for a session.
Both operations must consult the tombstone before touching promise rows.