Resource reference requests now evaluate only the permissions declared for the selected runtime request. This reduces unrelated App installation checks while preserving organization scope, missing-permission denial and grant revocation. No SDK, App or environment changes are required.