Roles & permissions

Placeholder matrix — refine with Morgan + Remy.

Capability	Guest	Manager	Commissioner
Browse discoverable leagues	✅	✅	✅
Create league	— (auth)	✅	✅
Request to join	— (auth)	✅ (pending approval)	✅ (pending approval)
Join via invite code	— (auth)	✅	✅
Approve / decline join requests	—	❌	✅
Draft picks	—	✅ (own)	✅ (own; overrides TBD)
Set roster / bench	—	✅ (own)	✅ (own; overrides TBD)
Submit waivers	—	✅ (own)	✅ (own)
Edit league settings	—	❌	✅
Manage membership	—	❌	✅

Open questions live in Open decisions.