diff --git a/src/app/labs/page.tsx b/src/app/labs/page.tsx
index 737a20f75..78adf9925 100644
--- a/src/app/labs/page.tsx
+++ b/src/app/labs/page.tsx
@@ -30,12 +30,18 @@ import { PullToRefreshIndicator } from "@/components/ui/pull-to-refresh-indicato
 import { ResponsiveSheet } from "@/components/ui/responsive-sheet";
 import { useAuth } from "@/hooks/use-auth";
 import { useMounted } from "@/hooks/use-mounted";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { usePullToRefresh } from "@/hooks/use-pull-to-refresh";
 import { useTranslations } from "@/lib/i18n/context";
 import { queryKeys } from "@/lib/query-keys";
 
 export default function LabsPage() {
   const { user, isAuthenticated, isLoading } = useAuth();
+  // v1.36.x — entering a lab result by hand is an admitted delegated write.
+  // Scanning a report is not: it files a document and commits through the OCR
+  // route, and neither is delegated. So a WRITE delegate keeps the manual add
+  // and loses the choice menu around it.
+  const { canAdd, canManage } = useRecordCapabilities();
   const mounted = useMounted();
   const router = useRouter();
   const queryClient = useQueryClient();
@@ -94,27 +100,29 @@ export default function LabsPage() {
                 point, left of the primary Add and linking to the Labs settings
                 page (view, sort order, biomarker CRUD + reorder). Mirrors the
                 medication page header's wrench glyph + slot + 44px tap floor. */}
-            <Button
-              asChild
-              variant="ghost"
-              size="icon"
-              className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
-            >
-              <Link
-                href="/settings/layout/labs"
-                aria-label={t("labs.customize")}
-                title={t("labs.customize")}
+            {canManage && (
+              <Button
+                asChild
+                variant="ghost"
+                size="icon"
+                className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
               >
-                <Wrench className="h-4 w-4" aria-hidden="true" />
-              </Link>
-            </Button>
+                <Link
+                  href="/settings/layout/labs"
+                  aria-label={t("labs.customize")}
+                  title={t("labs.customize")}
+                >
+                  <Wrench className="h-4 w-4" aria-hidden="true" />
+                </Link>
+              </Button>
+            )}
             {/* v1.18.10 — the "Add" action is a CHOICE when scanning is
                 available: scan a document (OCR) or add a value by hand. The scan
                 option only appears when the capability probe reports a usable
                 mode (vision, or local OCR opted-in for text-only providers), so
                 the surface stays simple for everyone else. When scanning is
                 unavailable, Add opens the manual form directly. */}
-            {ocrCapability.data?.available ? (
+            {ocrCapability.data?.available && canManage ? (
               <DropdownMenu>
                 <DropdownMenuTrigger asChild>
                   <Button className="min-h-11 sm:min-h-9">
@@ -133,7 +141,7 @@ export default function LabsPage() {
                   </DropdownMenuItem>
                 </DropdownMenuContent>
               </DropdownMenu>
-            ) : (
+            ) : canAdd ? (
               <Button
                 onClick={() => setDialogOpen(true)}
                 className="min-h-11 sm:min-h-9"
@@ -141,7 +149,7 @@ export default function LabsPage() {
                 <Plus className="h-4 w-4" />
                 {t("common.add")}
               </Button>
-            )}
+            ) : null}
           </>
         }
       />
diff --git a/src/app/measurements/page.tsx b/src/app/measurements/page.tsx
index 599915e8b..f6517480a 100644
--- a/src/app/measurements/page.tsx
+++ b/src/app/measurements/page.tsx
@@ -4,6 +4,7 @@ import { useCallback, useEffect, useState } from "react";
 import { useQueryClient } from "@tanstack/react-query";
 import { useAuth } from "@/hooks/use-auth";
 import { useMounted } from "@/hooks/use-mounted";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { usePullToRefresh } from "@/hooks/use-pull-to-refresh";
 import {
   MeasurementForm,
@@ -35,6 +36,7 @@ export function resolveMeasurementReturnTo(
 
 export default function MeasurementsPage() {
   const { isAuthenticated, isLoading } = useAuth();
+  const { canAdd } = useRecordCapabilities();
   const mounted = useMounted();
   const router = useRouter();
   const queryClient = useQueryClient();
@@ -149,17 +151,22 @@ export default function MeasurementsPage() {
           </span>
         }
         description={t("measurements.subtitle")}
+        // v1.36.x — entering a reading is one of the verbs a WRITE grant
+        // admits, so this is the header action a delegate keeps. A read-only
+        // delegate loses it entirely rather than meeting a disabled one.
         actions={
-          <Button
-            className="min-h-11 sm:min-h-9"
-            onClick={() => {
-              setReturnTo(null);
-              setDialogOpen(true);
-            }}
-          >
-            <Plus className="h-4 w-4" />
-            {t("measurements.addMeasurement")}
-          </Button>
+          canAdd ? (
+            <Button
+              className="min-h-11 sm:min-h-9"
+              onClick={() => {
+                setReturnTo(null);
+                setDialogOpen(true);
+              }}
+            >
+              <Plus className="h-4 w-4" />
+              {t("measurements.addMeasurement")}
+            </Button>
+          ) : null
         }
       />
 
diff --git a/src/app/mood/page.tsx b/src/app/mood/page.tsx
index a98078fd6..cc9b87b29 100644
--- a/src/app/mood/page.tsx
+++ b/src/app/mood/page.tsx
@@ -4,6 +4,7 @@ import { useCallback, useState } from "react";
 import Link from "next/link";
 import { useQueryClient } from "@tanstack/react-query";
 import { useAuth } from "@/hooks/use-auth";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useMounted } from "@/hooks/use-mounted";
 import { usePullToRefresh } from "@/hooks/use-pull-to-refresh";
 import { MoodForm } from "@/components/mood/mood-form";
@@ -20,6 +21,7 @@ import { useTranslations } from "@/lib/i18n/context";
 
 export default function MoodPage() {
   const { user, isAuthenticated, isLoading } = useAuth();
+  const { canManage } = useRecordCapabilities();
   const mounted = useMounted();
   const router = useRouter();
   const queryClient = useQueryClient();
@@ -95,13 +97,18 @@ export default function MoodPage() {
                 <Wrench className="h-4 w-4" aria-hidden="true" />
               </Link>
             </Button>
-            <Button
-              onClick={() => setDialogOpen(true)}
-              className="min-h-11 sm:min-h-9"
-            >
-              <Plus className="h-4 w-4" />
-              {t("mood.addEntry")}
-            </Button>
+            {/* v1.36.x — a mood entry is not one of the verbs a grant
+                admits, so it stays with the account whose record it is. A
+                delegate at any level gets no add path here. */}
+            {canManage && (
+              <Button
+                onClick={() => setDialogOpen(true)}
+                className="min-h-11 sm:min-h-9"
+              >
+                <Plus className="h-4 w-4" />
+                {t("mood.addEntry")}
+              </Button>
+            )}
           </>
         }
       />
diff --git a/src/components/custom-metrics/custom-metric-list.tsx b/src/components/custom-metrics/custom-metric-list.tsx
index b7669cc0c..01e3bafc0 100644
--- a/src/components/custom-metrics/custom-metric-list.tsx
+++ b/src/components/custom-metrics/custom-metric-list.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useState } from "react";
 import Link from "next/link";
 import { useRouter } from "next/navigation";
@@ -29,6 +30,14 @@ import type { CustomMetricDto, CustomMetricListResponse } from "./types";
  */
 export function CustomMetricList() {
   const { t } = useTranslations();
+  // v1.36.x — the section is dropped whole inside somebody else's record.
+  // Defining a metric is not a delegated verb, and every row here links to
+  // `/custom-metrics/{id}`, which sharing does not cover: the shell turns a
+  // delegate away at that route, so the rows would be doors into a wall.
+  // Logging a value against a custom metric IS admitted, but there is no
+  // reachable surface for it under a switch, and inventing one is a read-model
+  // change this does not make.
+  const { canManage } = useRecordCapabilities();
   const router = useRouter();
   const [addOpen, setAddOpen] = useState(false);
   const [addFooterEl, setAddFooterEl] = useState<HTMLDivElement | null>(null);
@@ -47,6 +56,8 @@ export function CustomMetricList() {
     router.push(`/custom-metrics/${saved.id}`);
   }
 
+  if (!canManage) return null;
+
   return (
     <section
       className="border-border space-y-3 border-t pt-6"
diff --git a/src/components/cycle/cycle-calendar.tsx b/src/components/cycle/cycle-calendar.tsx
index 9da52dc66..d72c2fd38 100644
--- a/src/components/cycle/cycle-calendar.tsx
+++ b/src/components/cycle/cycle-calendar.tsx
@@ -70,7 +70,12 @@ export interface CycleCalendarProps {
    * renders as the distinct light oval instead of the predicted dot.
    */
   confirmedOvulation?: string | null;
-  onSelectDay: (date: string) => void;
+  /**
+   * Open the day. Omitted inside somebody else's record: no grant level
+   * admits a cycle write, so the cells stay readable and stop being controls
+   * rather than opening a sheet whose every button the server would refuse.
+   */
+  onSelectDay?: (date: string) => void;
   className?: string;
 }
 
@@ -208,34 +213,8 @@ export function CycleCalendar({
                 ? "UNGRADED"
                 : undefined;
 
-          return (
-            <button
-              key={date}
-              type="button"
-              role="gridcell"
-              aria-label={aria}
-              aria-current={isToday ? "date" : undefined}
-              data-flow-level={flowLevel}
-              data-fertile={info?.isFertileWindow ? "true" : undefined}
-              data-predicted={
-                info?.isPredictedPeriod && !info?.isPeriodLogged
-                  ? "true"
-                  : undefined
-              }
-              data-ovulation={
-                isConfirmedOvulation
-                  ? "confirmed"
-                  : isPredictedOvulationDot
-                    ? "predicted"
-                    : undefined
-              }
-              onClick={() => onSelectDay(date)}
-              className={cn(
-                "relative flex aspect-square min-h-11 flex-col items-center justify-center rounded-lg text-sm transition-colors",
-                "hover:bg-accent focus-visible:ring-ring/50 focus-visible:ring-2 focus-visible:outline-none",
-                isToday && "font-semibold",
-              )}
-            >
+          const content = (
+            <>
               {/* Fertile window: a soft full-cell band (calm fill, not a hard
                   ring) so the window reads as a continuous range across days. */}
               {info?.isFertileWindow ? (
@@ -311,7 +290,47 @@ export function CycleCalendar({
                   <span className="bg-muted-foreground/70 h-1 w-1 rounded-full" />
                 ) : null}
               </span>
+            </>
+          );
+
+          const cellClass = cn(
+            "relative flex aspect-square min-h-11 flex-col items-center justify-center rounded-lg text-sm transition-colors",
+            isToday && "font-semibold",
+          );
+          const cellAttrs = {
+            role: "gridcell" as const,
+            "aria-label": aria,
+            "aria-current": isToday ? ("date" as const) : undefined,
+            "data-flow-level": flowLevel,
+            "data-fertile": info?.isFertileWindow ? "true" : undefined,
+            "data-predicted":
+              info?.isPredictedPeriod && !info?.isPeriodLogged
+                ? "true"
+                : undefined,
+            "data-ovulation": isConfirmedOvulation
+              ? "confirmed"
+              : isPredictedOvulationDot
+                ? "predicted"
+                : undefined,
+          };
+
+          return onSelectDay ? (
+            <button
+              key={date}
+              type="button"
+              {...cellAttrs}
+              onClick={() => onSelectDay(date)}
+              className={cn(
+                cellClass,
+                "hover:bg-accent focus-visible:ring-ring/50 focus-visible:ring-2 focus-visible:outline-none",
+              )}
+            >
+              {content}
             </button>
+          ) : (
+            <div key={date} {...cellAttrs} className={cellClass}>
+              {content}
+            </div>
           );
         })}
       </div>
diff --git a/src/components/cycle/cycle-view.tsx b/src/components/cycle/cycle-view.tsx
index 650093273..65adf14de 100644
--- a/src/components/cycle/cycle-view.tsx
+++ b/src/components/cycle/cycle-view.tsx
@@ -16,6 +16,7 @@ import { Card, CardContent } from "@/components/ui/card";
 import { PageHeader } from "@/components/ui/page-header";
 import { Skeleton } from "@/components/ui/skeleton";
 import { Tabs, TabsContent, TabsList, TabsTrigger } from "@/components/ui/tabs";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useTranslations } from "@/lib/i18n/context";
 import { cn } from "@/lib/utils";
 import { CycleRing } from "./cycle-ring";
@@ -92,6 +93,10 @@ type CycleTab = (typeof CYCLE_TABS)[number];
 
 export function CycleView() {
   const { t } = useTranslations();
+  // v1.36.x — no grant level admits a cycle write. Inside somebody else's
+  // record the page stays readable and every path into the log-day sheet and
+  // the profile settings is absent, rather than opening onto a refusal.
+  const { canManage } = useRecordCapabilities();
 
   // Deep-link support: `/cycle?tab=insights` opens the insights tab. The value
   // is read ONCE for the initial `defaultValue` (uncontrolled tabs — so normal
@@ -163,24 +168,28 @@ export function CycleView() {
         description={t("cycle.subtitle")}
         actions={
           <>
-            <Button
-              variant="outline"
-              size="icon"
-              className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
-              aria-label={t("cycle.tabs.settings")}
-              title={t("cycle.tabs.settings")}
-              data-slot="cycle-settings-wrench"
-              onClick={() => setTab("settings")}
-            >
-              <SlidersHorizontal className="h-4 w-4" aria-hidden="true" />
-            </Button>
-            <Button
-              onClick={() => openSheet(today)}
-              className="min-h-11 sm:min-h-9"
-            >
-              <Plus className="h-4 w-4" />
-              {t("cycle.logToday")}
-            </Button>
+            {canManage && (
+              <>
+                <Button
+                  variant="outline"
+                  size="icon"
+                  className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
+                  aria-label={t("cycle.tabs.settings")}
+                  title={t("cycle.tabs.settings")}
+                  data-slot="cycle-settings-wrench"
+                  onClick={() => setTab("settings")}
+                >
+                  <SlidersHorizontal className="h-4 w-4" aria-hidden="true" />
+                </Button>
+                <Button
+                  onClick={() => openSheet(today)}
+                  className="min-h-11 sm:min-h-9"
+                >
+                  <Plus className="h-4 w-4" />
+                  {t("cycle.logToday")}
+                </Button>
+              </>
+            )}
           </>
         }
       />
@@ -260,7 +269,10 @@ export function CycleView() {
               ) : null}
               {/* Log CTA — first period when no cycle exists yet, next period
                   when the count paused on an overdue cycle. */}
-              {!loading && !calendarError && verdict?.dayOfCycle == null ? (
+              {canManage &&
+              !loading &&
+              !calendarError &&
+              verdict?.dayOfCycle == null ? (
                 <Button
                   variant="outline"
                   className="mt-1 w-full"
@@ -315,12 +327,14 @@ export function CycleView() {
             >
               {t("cycle.tabs.insights")}
             </TabsTrigger>
-            <TabsTrigger
-              value="settings"
-              className="text-xs sm:flex-1 sm:text-sm"
-            >
-              {t("cycle.tabs.settings")}
-            </TabsTrigger>
+            {canManage && (
+              <TabsTrigger
+                value="settings"
+                className="text-xs sm:flex-1 sm:text-sm"
+              >
+                {t("cycle.tabs.settings")}
+              </TabsTrigger>
+            )}
           </TabsList>
 
           <TabsContent value="calendar" className="mt-4 space-y-4">
@@ -359,7 +373,7 @@ export function CycleView() {
                             null)
                           : null
                       }
-                      onSelectDay={openSheet}
+                      onSelectDay={canManage ? openSheet : undefined}
                     />
                   </>
                 )}
@@ -429,7 +443,7 @@ export function CycleView() {
               <div className="flex h-32 items-center justify-center">
                 <Loader2 className="text-muted-foreground h-6 w-6 animate-spin motion-reduce:animate-none" />
               </div>
-            ) : profileQuery.data ? (
+            ) : profileQuery.data && canManage ? (
               <CycleSettings
                 key={profileQuery.data.updatedAt}
                 profile={profileQuery.data}
diff --git a/src/components/documents/document-card.tsx b/src/components/documents/document-card.tsx
index 94dec093d..3a51fb81b 100644
--- a/src/components/documents/document-card.tsx
+++ b/src/components/documents/document-card.tsx
@@ -55,7 +55,8 @@ export function DocumentCard({
   document: InboundDocumentDto;
   selected: boolean;
   /** `range` = extend the selection from the last anchor (shift-click). */
-  onToggleSelected: (id: string, range?: boolean) => void;
+  /** Omitted inside somebody else's record: selection feeds bulk edits. */
+  onToggleSelected?: (id: string, range?: boolean) => void;
   onOpen: (id: string) => void;
   /** Delete key on the focused card — undo-able delete owned by the page. */
   onDelete?: (id: string) => void;
@@ -173,23 +174,25 @@ export function DocumentCard({
               </p>
             ) : null}
           </div>
-          <Checkbox
-            checked={selected}
-            // Explicit click handling instead of onCheckedChange: the mouse
-            // event carries `shiftKey` for file-manager range selection.
-            // preventDefault stops Radix's internal toggle (state is fully
-            // controlled by the page's selection set anyway).
-            onClick={(e) => {
-              e.preventDefault();
-              onToggleSelected(document.id, e.shiftKey);
-            }}
-            aria-label={t("documents.card.selectLabel", { title })}
-            className={cn(
-              "relative z-10 shrink-0 transition-opacity",
-              "opacity-0 group-focus-within:opacity-100 group-hover:opacity-100",
-              selected && "opacity-100",
-            )}
-          />
+          {onToggleSelected && (
+            <Checkbox
+              checked={selected}
+              // Explicit click handling instead of onCheckedChange: the mouse
+              // event carries `shiftKey` for file-manager range selection.
+              // preventDefault stops Radix's internal toggle (state is fully
+              // controlled by the page's selection set anyway).
+              onClick={(e) => {
+                e.preventDefault();
+                onToggleSelected(document.id, e.shiftKey);
+              }}
+              aria-label={t("documents.card.selectLabel", { title })}
+              className={cn(
+                "relative z-10 shrink-0 transition-opacity",
+                "opacity-0 group-focus-within:opacity-100 group-hover:opacity-100",
+                selected && "opacity-100",
+              )}
+            />
+          )}
         </div>
         {document.conditionLinks.length > 0 ||
         document.servingClass === "attachment" ||
@@ -266,7 +269,7 @@ export function DocumentCard({
           const action = documentCardKeyAction(e.key);
           if (action === "select") {
             e.preventDefault();
-            onToggleSelected(document.id, e.shiftKey);
+            onToggleSelected?.(document.id, e.shiftKey);
           } else if (action === "delete") {
             e.preventDefault();
             onDelete?.(document.id);
@@ -277,7 +280,7 @@ export function DocumentCard({
           cancelLongPress();
           longPressTimer.current = setTimeout(() => {
             longPressFired.current = true;
-            onToggleSelected(document.id);
+            onToggleSelected?.(document.id);
           }, LONG_PRESS_MS);
         }}
         onTouchMove={cancelLongPress}
diff --git a/src/components/documents/document-detail-sheet.tsx b/src/components/documents/document-detail-sheet.tsx
index 6c0a3a154..a09c9bb6a 100644
--- a/src/components/documents/document-detail-sheet.tsx
+++ b/src/components/documents/document-detail-sheet.tsx
@@ -16,6 +16,7 @@
  * copy. A Share action in the footer opens the clinician share-link create
  * flow (shared `ShareLinkCreateForm`) with this document pre-attached.
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import {
   ArrowRight,
@@ -246,6 +247,7 @@ export function DocumentDetailSheet({
       (fact) => fact.factType === "OBSERVATION" && fact.status !== "REJECTED",
     ).length ?? 0;
   const { user } = useAuth();
+  const { canManage } = useRecordCapabilities();
   const labsModuleEnabled = user?.modules?.labs !== false;
 
   const episodes = useIllnessEpisodes(true);
@@ -513,15 +515,23 @@ export function DocumentDetailSheet({
             // labels collapse to icon-only (aria-labelled) so three controls
             // never overflow the sheet at 360 px; the labels return at `sm+`.
             <div className="flex w-full items-center justify-between gap-2">
-              <Button
-                variant="ghost"
-                className="text-destructive hover:text-destructive hover:bg-destructive/10"
-                onClick={() => remove.mutate(doc.id)}
-                disabled={remove.isPending}
-              >
-                <Trash2 className="size-4" aria-hidden />
-                {t("documents.detail.delete")}
-              </Button>
+              {/* v1.36.x — deleting, sharing and re-filing a document are the
+                  owner's alone. Inside somebody else's record the sheet reads
+                  the document and offers the download, and the leading slot
+                  simply has nothing in it. */}
+              {canManage ? (
+                <Button
+                  variant="ghost"
+                  className="text-destructive hover:text-destructive hover:bg-destructive/10"
+                  onClick={() => remove.mutate(doc.id)}
+                  disabled={remove.isPending}
+                >
+                  <Trash2 className="size-4" aria-hidden />
+                  {t("documents.detail.delete")}
+                </Button>
+              ) : (
+                <span />
+              )}
               <div className="flex items-center gap-2">
                 {aiEnabled ? (
                   // v1.28.52 (Documents R3) — "Ask the Coach" opens the REAL
@@ -546,17 +556,19 @@ export function DocumentDetailSheet({
                     </span>
                   </Button>
                 ) : null}
-                <Button
-                  variant="outline"
-                  onClick={() => setShareOpen(true)}
-                  data-slot="document-share"
-                  aria-label={t("documents.detail.share")}
-                >
-                  <Share2 className="size-4" aria-hidden />
-                  <span className="hidden sm:inline">
-                    {t("documents.detail.share")}
-                  </span>
-                </Button>
+                {canManage && (
+                  <Button
+                    variant="outline"
+                    onClick={() => setShareOpen(true)}
+                    data-slot="document-share"
+                    aria-label={t("documents.detail.share")}
+                  >
+                    <Share2 className="size-4" aria-hidden />
+                    <span className="hidden sm:inline">
+                      {t("documents.detail.share")}
+                    </span>
+                  </Button>
+                )}
                 <Button
                   variant="outline"
                   asChild
@@ -620,6 +632,10 @@ export function DocumentDetailSheet({
 
             <DocumentSummaryBlock
               summary={doc.summary}
+              // The stored summary is read; generating one writes to the
+              // owner's record, so a delegate reads what is there and has no
+              // generate control.
+              canGenerate={canManage}
               summaryState={doc.summaryState}
               generatedAtLabel={
                 doc.summaryGeneratedAt
@@ -632,41 +648,43 @@ export function DocumentDetailSheet({
               onGenerate={generateStoredSummary}
             />
 
-            <DocumentAiSection
-              aiEnabled={aiEnabled}
-              autoReadEnabled={autoReadEnabled}
-              indexEnabled={indexEnabled}
-              unavailableReason={capability.data?.reason ?? null}
-              actionsDisabled={capability.isPending}
-              onSuggest={runSuggest}
-              suggestPending={suggest.isPending}
-              suggestErrorKey={
-                suggest.isError ? documentAiErrorKey(suggest.error) : null
-              }
-              onSummarise={runSummary}
-              summaryPending={summary.isPending}
-              suggestion={suggestion}
-              suggestionKindLabel={suggestionKindLabel}
-              suggestionDateLabel={suggestionDateLabel}
-              appliedFields={appliedFields}
-              onUseTitle={applyTitle}
-              onUseKind={applyKind}
-              onUseDate={applyDate}
-              onDismissSuggestion={() => setSuggestion(null)}
-              summaryOutput={summaryOutput}
-              summaryResult={summary.data ?? null}
-              summaryErrorKey={
-                summary.isError ? documentAiErrorKey(summary.error) : null
-              }
-              onCloseSummary={() => {
-                setSummaryOutput(null);
-                summary.reset();
-              }}
-              hasContentIndex={doc.hasContentIndex}
-              contentIndexSource={doc.contentIndexSource}
-              indexPending={indexDoc.isPending}
-              onIndex={runIndex}
-            />
+            {canManage && (
+              <DocumentAiSection
+                aiEnabled={aiEnabled}
+                autoReadEnabled={autoReadEnabled}
+                indexEnabled={indexEnabled}
+                unavailableReason={capability.data?.reason ?? null}
+                actionsDisabled={capability.isPending}
+                onSuggest={runSuggest}
+                suggestPending={suggest.isPending}
+                suggestErrorKey={
+                  suggest.isError ? documentAiErrorKey(suggest.error) : null
+                }
+                onSummarise={runSummary}
+                summaryPending={summary.isPending}
+                suggestion={suggestion}
+                suggestionKindLabel={suggestionKindLabel}
+                suggestionDateLabel={suggestionDateLabel}
+                appliedFields={appliedFields}
+                onUseTitle={applyTitle}
+                onUseKind={applyKind}
+                onUseDate={applyDate}
+                onDismissSuggestion={() => setSuggestion(null)}
+                summaryOutput={summaryOutput}
+                summaryResult={summary.data ?? null}
+                summaryErrorKey={
+                  summary.isError ? documentAiErrorKey(summary.error) : null
+                }
+                onCloseSummary={() => {
+                  setSummaryOutput(null);
+                  summary.reset();
+                }}
+                hasContentIndex={doc.hasContentIndex}
+                contentIndexSource={doc.contentIndexSource}
+                indexPending={indexDoc.isPending}
+                onIndex={runIndex}
+              />
+            )}
 
             {mutationError ? (
               <p role="alert" className="text-destructive text-sm">
@@ -693,6 +711,16 @@ export function DocumentDetailSheet({
                     maxLength={200}
                     placeholder={t("documents.detail.titlePlaceholder")}
                   />
+                ) : !canManage ? (
+                  <p
+                    id="document-title-input"
+                    className={cn(
+                      "min-h-10 px-3 py-2 text-sm",
+                      doc.title === null && "text-muted-foreground",
+                    )}
+                  >
+                    {doc.title ?? t("documents.detail.titlePlaceholder")}
+                  </p>
                 ) : (
                   <button
                     type="button"
@@ -724,8 +752,12 @@ export function DocumentDetailSheet({
                   <Label htmlFor="document-kind-select">
                     {t("documents.detail.kindLabel")}
                   </Label>
+                  {/* Read-only rather than absent: the value IS the content
+                      a delegate came to read, and a form field that shows it
+                      without accepting a change is the honest rendering. */}
                   <Select
                     value={doc.kind}
+                    disabled={!canManage}
                     onValueChange={(value) =>
                       patch.mutate({ kind: value as InboundDocumentKindValue })
                     }
@@ -748,6 +780,7 @@ export function DocumentDetailSheet({
                   </Label>
                   <DateField
                     id="document-date-field"
+                    disabled={!canManage}
                     value={doc.documentDate ?? ""}
                     onChange={(value) =>
                       patch.mutate({
@@ -778,7 +811,7 @@ export function DocumentDetailSheet({
                       {t("documents.detail.noConditions")}
                     </span>
                   ) : null}
-                  {(episodes.data?.length ?? 0) > 0 ? (
+                  {canManage && (episodes.data?.length ?? 0) > 0 ? (
                     <Popover>
                       <PopoverTrigger asChild>
                         <Button
diff --git a/src/components/documents/document-summary-block.tsx b/src/components/documents/document-summary-block.tsx
index bee251687..7828f5475 100644
--- a/src/components/documents/document-summary-block.tsx
+++ b/src/components/documents/document-summary-block.tsx
@@ -47,6 +47,7 @@ export function DocumentSummaryBlock({
   aiEnabled,
   isGenerating,
   actionsDisabled,
+  canGenerate = true,
   onGenerate,
 }: {
   /** The stored, decrypted summary, or null when there is none to show. */
@@ -59,6 +60,12 @@ export function DocumentSummaryBlock({
   isGenerating: boolean;
   /** Capability still resolving — the transport mode isn't known yet. */
   actionsDisabled: boolean;
+  /**
+   * v1.36.x — false inside somebody else's record: a stored summary is
+   * readable, generating one writes to the owner's record and no grant level
+   * admits it. The state line stays; the button goes.
+   */
+  canGenerate?: boolean;
   onGenerate: () => void;
 }) {
   const { t } = useTranslations();
@@ -103,7 +110,7 @@ export function DocumentSummaryBlock({
       <p className="text-muted-foreground text-xs">
         {t(absentCopyKey(summaryState))}
       </p>
-      {aiEnabled ? (
+      {aiEnabled && canGenerate ? (
         <Button
           type="button"
           variant="outline"
diff --git a/src/components/documents/document-timeline.tsx b/src/components/documents/document-timeline.tsx
index 77c863832..7afb9c70c 100644
--- a/src/components/documents/document-timeline.tsx
+++ b/src/components/documents/document-timeline.tsx
@@ -63,7 +63,8 @@ export function DocumentTimeline({
   isFetchingNextPage: boolean;
   onLoadMore: () => void;
   selectedIds: ReadonlySet<string>;
-  onToggleSelected: (id: string, range?: boolean) => void;
+  /** Omitted inside somebody else's record: selection feeds bulk edits. */
+  onToggleSelected?: (id: string, range?: boolean) => void;
   onOpen: (id: string) => void;
   /** Delete key on the focused card — the page owns the undo-able delete. */
   onDelete?: (id: string) => void;
diff --git a/src/components/documents/documents-view.tsx b/src/components/documents/documents-view.tsx
index c4cafbfa4..ca4aa87e0 100644
--- a/src/components/documents/documents-view.tsx
+++ b/src/components/documents/documents-view.tsx
@@ -14,6 +14,7 @@
  * module bounces home. Every `/api/documents/inbound/*` route re-enforces
  * the gate server-side — this is a UX redirect, not the security boundary.
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import {
   useInfiniteQuery,
   useMutation,
@@ -179,6 +180,11 @@ export function closeDocumentSelectionAfterCoachHandoff(
 export function DocumentsView() {
   const { t } = useTranslations();
   const { user, isLoading: authLoading, isAuthenticated } = useAuth();
+  // v1.36.x — uploading a document, filing it, sharing it and asking the AI
+  // about it are none of them delegated verbs. Inside somebody else's record
+  // the vault reads and nothing more: no upload path, no selection, no bulk
+  // bar, no corpus backfill.
+  const { canManage } = useRecordCapabilities();
   const router = useRouter();
   const pathname = usePathname();
   const searchParams = useSearchParams();
@@ -369,7 +375,7 @@ export function DocumentsView() {
     },
     [episodeIdFilter, t],
   );
-  const { dropActive } = usePageFileDrop(enqueueFiles);
+  const { dropActive } = usePageFileDrop(canManage ? enqueueFiles : undefined);
 
   const episodes = useIllnessEpisodes(true);
 
@@ -381,6 +387,7 @@ export function DocumentsView() {
   const contentIndex = usage.data?.contentIndex;
   const canIndexContent = contentIndex?.enabled ?? false;
   const showIndexAll =
+    canManage &&
     canIndexContent &&
     contentIndex !== undefined &&
     contentIndex.totalCount > 0 &&
@@ -749,18 +756,22 @@ export function DocumentsView() {
         title={t("documents.title")}
         description={t("documents.subtitle")}
         actions={
-          <Button onClick={() => uploadInputRef.current?.click()}>
-            <Upload className="size-4" aria-hidden />
-            {t("documents.pageUpload")}
-          </Button>
+          canManage ? (
+            <Button onClick={() => uploadInputRef.current?.click()}>
+              <Upload className="size-4" aria-hidden />
+              {t("documents.pageUpload")}
+            </Button>
+          ) : null
         }
       />
 
-      <UploadZone
-        usage={usage.data}
-        inputRef={uploadInputRef}
-        onFiles={enqueueFiles}
-      />
+      {canManage && (
+        <UploadZone
+          usage={usage.data}
+          inputRef={uploadInputRef}
+          onFiles={enqueueFiles}
+        />
+      )}
 
       <DocumentFilterBar
         searchValue={searchDraft}
@@ -802,10 +813,12 @@ export function DocumentsView() {
           description={t("documents.empty.description")}
           ctaSize="lg"
           action={
-            <Button onClick={() => uploadInputRef.current?.click()}>
-              <Upload className="size-4" aria-hidden />
-              {t("documents.empty.action")}
-            </Button>
+            canManage ? (
+              <Button onClick={() => uploadInputRef.current?.click()}>
+                <Upload className="size-4" aria-hidden />
+                {t("documents.empty.action")}
+              </Button>
+            ) : undefined
           }
         />
       ) : showEmpty && isFiltered ? (
@@ -828,9 +841,9 @@ export function DocumentsView() {
           isFetchingNextPage={list.isFetchingNextPage}
           onLoadMore={() => void list.fetchNextPage()}
           selectedIds={selectedIds}
-          onToggleSelected={toggleSelected}
+          onToggleSelected={canManage ? toggleSelected : undefined}
           onOpen={openDetail}
-          onDelete={(id) => deleteBulk([id])}
+          onDelete={canManage ? (id) => deleteBulk([id]) : undefined}
           highlightId={upload.highlightId}
           onPrefetch={prefetchDetail}
         />
@@ -844,7 +857,7 @@ export function DocumentsView() {
         contentIndexEnabled={usage.data?.contentIndex.enabled}
       />
 
-      {selectedIds.size > 0 ? (
+      {canManage && selectedIds.size > 0 ? (
         <DocumentBulkBar
           selectedCount={selectedIds.size}
           episodes={(episodes.data ?? []).map((e) => ({
diff --git a/src/components/documents/use-page-file-drop.ts b/src/components/documents/use-page-file-drop.ts
index a9fd06ff5..3488a1c40 100644
--- a/src/components/documents/use-page-file-drop.ts
+++ b/src/components/documents/use-page-file-drop.ts
@@ -22,18 +22,26 @@
  */
 import { useEffect, useRef, useState } from "react";
 
-export function usePageFileDrop(onFiles: (files: File[]) => void): {
+/**
+ * @param onFiles Where dropped or pasted files go. Omitted inside somebody
+ *   else's record: uploading is not a delegated verb, so the listeners are
+ *   never attached and the drop overlay never appears. Offering the overlay
+ *   and swallowing the file would be worse than the browser's own behaviour.
+ */
+export function usePageFileDrop(onFiles?: (files: File[]) => void): {
   dropActive: boolean;
 } {
   const [dropActive, setDropActive] = useState(false);
   const depthRef = useRef(0);
   const onFilesRef = useRef(onFiles);
+  const enabled = onFiles != null;
 
   useEffect(() => {
     onFilesRef.current = onFiles;
   }, [onFiles]);
 
   useEffect(() => {
+    if (!enabled) return;
     const isFileDrag = (event: DragEvent) =>
       event.dataTransfer?.types?.includes("Files") ?? false;
 
@@ -59,7 +67,7 @@ export function usePageFileDrop(onFiles: (files: File[]) => void): {
       depthRef.current = 0;
       setDropActive(false);
       const files = Array.from(event.dataTransfer?.files ?? []);
-      if (files.length > 0) onFilesRef.current(files);
+      if (files.length > 0) onFilesRef.current?.(files);
     };
     const onKeyDown = (event: KeyboardEvent) => {
       if (event.key !== "Escape" || depthRef.current === 0) return;
@@ -70,7 +78,7 @@ export function usePageFileDrop(onFiles: (files: File[]) => void): {
       const files = Array.from(event.clipboardData?.files ?? []);
       if (files.length === 0) return;
       event.preventDefault();
-      onFilesRef.current(files);
+      onFilesRef.current?.(files);
     };
 
     window.addEventListener("dragenter", onDragEnter);
@@ -87,7 +95,7 @@ export function usePageFileDrop(onFiles: (files: File[]) => void): {
       window.removeEventListener("keydown", onKeyDown);
       window.removeEventListener("paste", onPaste);
     };
-  }, []);
+  }, [enabled]);
 
   return { dropActive };
 }
diff --git a/src/components/illness/illness-day-timeline.tsx b/src/components/illness/illness-day-timeline.tsx
index 54841722e..4582f7ec3 100644
--- a/src/components/illness/illness-day-timeline.tsx
+++ b/src/components/illness/illness-day-timeline.tsx
@@ -12,6 +12,7 @@
  * day-log history, paginated server-side); when nothing has been logged it
  * renders a calm prompt to log a day.
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { Card, CardContent, CardHeader } from "@/components/ui/card";
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
@@ -91,6 +92,8 @@ export function IllnessDayTimeline({
   onLogDay: () => void;
 }) {
   const { t } = useTranslations();
+  // v1.36.x — logging a day is not a delegated verb.
+  const { canManage } = useRecordCapabilities();
   const { data, isLoading, isError } = useIllnessDayLogList(episodeId, "desc");
 
   const dayLogs = data?.dayLogs ?? [];
@@ -117,13 +120,15 @@ export function IllnessDayTimeline({
             <p className="text-muted-foreground text-sm">
               {t("illness.timeline.empty")}
             </p>
-            <Button
-              variant="outline"
-              className="min-h-11 sm:min-h-9"
-              onClick={onLogDay}
-            >
-              {t("illness.logDay")}
-            </Button>
+            {canManage && (
+              <Button
+                variant="outline"
+                className="min-h-11 sm:min-h-9"
+                onClick={onLogDay}
+              >
+                {t("illness.logDay")}
+              </Button>
+            )}
           </div>
         ) : (
           <div className="space-y-4">
diff --git a/src/components/illness/illness-episode-detail.tsx b/src/components/illness/illness-episode-detail.tsx
index 79e4a8a17..98c444d23 100644
--- a/src/components/illness/illness-episode-detail.tsx
+++ b/src/components/illness/illness-episode-detail.tsx
@@ -8,6 +8,7 @@
  * red-flag / pre-onset / nadir). Calm + retrospective — no prediction UI, no
  * alarming colour.
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useState } from "react";
 
 import { EpisodeDocumentsCard } from "@/components/documents/episode-documents-card";
@@ -36,6 +37,9 @@ function todayLocal(): string {
 
 export function IllnessEpisodeDetail({ episodeId }: { episodeId: string }) {
   const { t } = useTranslations();
+  // v1.36.x — logging a day, editing and resolving an episode are the
+  // owner's; a delegate reads the episode.
+  const { canManage } = useRecordCapabilities();
   const fmt = useFormatters();
   const {
     data: episode,
@@ -93,26 +97,28 @@ export function IllnessEpisodeDetail({ episodeId }: { episodeId: string }) {
             </div>
           ) : null}
         </div>
-        <div className="flex shrink-0 items-center gap-1">
-          <Button
-            onClick={() => setLogOpen(true)}
-            className="min-h-11 sm:min-h-9"
-          >
-            {t("illness.logDay")}
-          </Button>
-          {episode ? (
-            <EpisodeMenu
-              episode={episode}
-              onEdit={() => setEditOpen(true)}
-              onResolve={
-                active && !isChronic
-                  ? () => resolve.mutate(episode.id)
-                  : undefined
-              }
-              resolving={resolve.isPending}
-            />
-          ) : null}
-        </div>
+        {canManage && (
+          <div className="flex shrink-0 items-center gap-1">
+            <Button
+              onClick={() => setLogOpen(true)}
+              className="min-h-11 sm:min-h-9"
+            >
+              {t("illness.logDay")}
+            </Button>
+            {episode ? (
+              <EpisodeMenu
+                episode={episode}
+                onEdit={() => setEditOpen(true)}
+                onResolve={
+                  active && !isChronic
+                    ? () => resolve.mutate(episode.id)
+                    : undefined
+                }
+                resolving={resolve.isPending}
+              />
+            ) : null}
+          </div>
+        )}
       </div>
 
       {episode?.note ? (
diff --git a/src/components/illness/illness-view.tsx b/src/components/illness/illness-view.tsx
index da308b211..9661cce7e 100644
--- a/src/components/illness/illness-view.tsx
+++ b/src/components/illness/illness-view.tsx
@@ -15,6 +15,7 @@
  * per-day timeline and correlation card live. Retrospective-only copy — a
  * journal, not a medical device, and it does not diagnose.
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useId, useMemo, useState } from "react";
 import Link from "next/link";
 import { ChevronDown, Plus, Stethoscope, Wrench } from "lucide-react";
@@ -73,6 +74,7 @@ function EpisodeCard({
   view,
 }: EpisodeCardProps) {
   const { t } = useTranslations();
+  const { canManage } = useRecordCapabilities();
   const fmt = useFormatters();
   const active = episode.resolvedAt === null;
   const isChronic = episode.lifecycle === "CHRONIC_ONGOING";
@@ -107,24 +109,26 @@ function EpisodeCard({
               </span>
             </div>
           </div>
-          <div className="flex shrink-0 items-center gap-1">
-            <Button
-              variant="outline"
-              size="sm"
-              className="min-h-11 sm:min-h-9"
-              onClick={() => onLogDay(episode.id)}
-            >
-              {t("illness.logDay")}
-            </Button>
-            <EpisodeMenu
-              episode={episode}
-              onEdit={() => onEdit(episode)}
-              onResolve={
-                active && !isChronic ? () => onResolve(episode.id) : undefined
-              }
-              resolving={resolving}
-            />
-          </div>
+          {canManage && (
+            <div className="flex shrink-0 items-center gap-1">
+              <Button
+                variant="outline"
+                size="sm"
+                className="min-h-11 sm:min-h-9"
+                onClick={() => onLogDay(episode.id)}
+              >
+                {t("illness.logDay")}
+              </Button>
+              <EpisodeMenu
+                episode={episode}
+                onEdit={() => onEdit(episode)}
+                onResolve={
+                  active && !isChronic ? () => onResolve(episode.id) : undefined
+                }
+                resolving={resolving}
+              />
+            </div>
+          )}
         </CardContent>
       </Card>
     );
@@ -141,16 +145,18 @@ function EpisodeCard({
             <span className="block truncate">{episode.label}</span>
           </Link>
         </CardTitle>
-        <CardAction>
-          <EpisodeMenu
-            episode={episode}
-            onEdit={() => onEdit(episode)}
-            onResolve={
-              active && !isChronic ? () => onResolve(episode.id) : undefined
-            }
-            resolving={resolving}
-          />
-        </CardAction>
+        {canManage && (
+          <CardAction>
+            <EpisodeMenu
+              episode={episode}
+              onEdit={() => onEdit(episode)}
+              onResolve={
+                active && !isChronic ? () => onResolve(episode.id) : undefined
+              }
+              resolving={resolving}
+            />
+          </CardAction>
+        )}
       </CardHeader>
 
       <CardContent className="flex h-full flex-col space-y-3">
@@ -205,14 +211,16 @@ function EpisodeCard({
             flow, promoted from a busy inline cluster. The card navigates to
             the detail surface on its title link; this is the one explicit
             button. */}
-        <div className="mt-auto pt-0">
-          <Button
-            className="min-h-11 w-full sm:min-h-9"
-            onClick={() => onLogDay(episode.id)}
-          >
-            {t("illness.logDay")}
-          </Button>
-        </div>
+        {canManage && (
+          <div className="mt-auto pt-0">
+            <Button
+              className="min-h-11 w-full sm:min-h-9"
+              onClick={() => onLogDay(episode.id)}
+            >
+              {t("illness.logDay")}
+            </Button>
+          </div>
+        )}
       </CardContent>
     </Card>
   );
@@ -308,6 +316,10 @@ function EpisodeGroup({
 
 export function IllnessView() {
   const { t } = useTranslations();
+  // v1.36.x — opening an illness entry is an admitted delegated write. Logging
+  // a day against one, editing it, resolving it and deleting it are not, so a
+  // delegate can start the record of an illness and nothing more.
+  const { canAdd, canManage } = useRecordCapabilities();
   const {
     data: episodes,
     isLoading,
@@ -380,29 +392,33 @@ export function IllnessView() {
           <>
             {/* v1.18.6 (MOD-01) — wrench left of the primary Add, linking to the
                 Illness settings page (view + reorder). */}
-            <Button
-              asChild
-              variant="ghost"
-              size="icon"
-              className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
-            >
-              <Link
-                href="/settings/layout/illness"
-                aria-label={t("illness.customize")}
-                title={t("illness.customize")}
+            {canManage && (
+              <Button
+                asChild
+                variant="ghost"
+                size="icon"
+                className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
               >
-                <Wrench className="h-4 w-4" aria-hidden="true" />
-              </Link>
-            </Button>
+                <Link
+                  href="/settings/layout/illness"
+                  aria-label={t("illness.customize")}
+                  title={t("illness.customize")}
+                >
+                  <Wrench className="h-4 w-4" aria-hidden="true" />
+                </Link>
+              </Button>
+            )}
             {/* v1.18.6 (MOD-02) — the add button reads "hinzufügen" like every
                 other module, not the bespoke "neue Episode". */}
-            <Button
-              onClick={() => setNewOpen(true)}
-              className="min-h-11 sm:min-h-9"
-            >
-              <Plus className="h-4 w-4" />
-              {t("common.add")}
-            </Button>
+            {canAdd && (
+              <Button
+                onClick={() => setNewOpen(true)}
+                className="min-h-11 sm:min-h-9"
+              >
+                <Plus className="h-4 w-4" />
+                {t("common.add")}
+              </Button>
+            )}
           </>
         }
       />
@@ -458,10 +474,12 @@ export function IllnessView() {
           description={t("illness.empty.body")}
           ctaSize="lg"
           action={
-            <Button onClick={() => setNewOpen(true)}>
-              <Plus className="h-4 w-4" />
-              {t("illness.newEpisode")}
-            </Button>
+            canAdd ? (
+              <Button onClick={() => setNewOpen(true)}>
+                <Plus className="h-4 w-4" />
+                {t("illness.newEpisode")}
+              </Button>
+            ) : undefined
           }
         />
       )}
diff --git a/src/components/labs/lab-biomarker-detail.tsx b/src/components/labs/lab-biomarker-detail.tsx
index 6985618a7..d57b42bd7 100644
--- a/src/components/labs/lab-biomarker-detail.tsx
+++ b/src/components/labs/lab-biomarker-detail.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useEffect, useMemo, useState } from "react";
 import Link from "next/link";
 import { useRouter } from "next/navigation";
@@ -93,6 +94,7 @@ const READINGS_PAGE_SIZE = 200;
  */
 export function LabBiomarkerDetail({ biomarkerId }: { biomarkerId: string }) {
   const { user } = useAuth();
+  const { canAdd, canManage } = useRecordCapabilities();
   const { t, locale } = useTranslations();
   const router = useRouter();
   const queryClient = useQueryClient();
@@ -346,17 +348,19 @@ export function LabBiomarkerDetail({ biomarkerId }: { biomarkerId: string }) {
             className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
             iconClassName="h-4 w-4"
           />
-          <Button
-            variant="ghost"
-            size="icon"
-            className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
-            onClick={() => setEditOpen(true)}
-            disabled={!marker}
-            aria-label={t("labs.biomarker.edit")}
-            title={t("labs.biomarker.edit")}
-          >
-            <Pencil className="h-4 w-4" />
-          </Button>
+          {canManage && (
+            <Button
+              variant="ghost"
+              size="icon"
+              className="min-h-11 min-w-11 sm:min-h-9 sm:min-w-9"
+              onClick={() => setEditOpen(true)}
+              disabled={!marker}
+              aria-label={t("labs.biomarker.edit")}
+              title={t("labs.biomarker.edit")}
+            >
+              <Pencil className="h-4 w-4" />
+            </Button>
+          )}
           {/* "Show all readings" mirrors the metric sub-pages' `<SubPageShell>`
               control. The full reading feed lives on
               `/labs/[biomarkerId]/values`; the detail page keeps the
@@ -378,18 +382,22 @@ export function LabBiomarkerDetail({ biomarkerId }: { biomarkerId: string }) {
               </Link>
             </Button>
           ) : null}
-          <Button
-            onClick={() => setAddOpen(true)}
-            // v1.18.10 (W10) — on the narrowest phones the h1 + Edit + Delete +
-            // text "Add" button crowd the row and truncate the title hard.
-            // Drop the Add button to icon-only under `sm` (label kept for
-            // screen readers via `aria-label`); the full text returns at `sm+`.
-            className="min-h-11 min-w-11 shrink-0 sm:min-h-9 sm:min-w-0"
-            aria-label={t("labs.addResult")}
-          >
-            <Plus className="h-4 w-4" />
-            <span className="hidden sm:inline">{t("labs.addResult")}</span>
-          </Button>
+          {/* v1.36.x — entering a result is an admitted delegated write;
+              renaming or removing the marker is not. */}
+          {canAdd && (
+            <Button
+              onClick={() => setAddOpen(true)}
+              // v1.18.10 (W10) — on the narrowest phones the h1 + Edit + Delete +
+              // text "Add" button crowd the row and truncate the title hard.
+              // Drop the Add button to icon-only under `sm` (label kept for
+              // screen readers via `aria-label`); the full text returns at `sm+`.
+              className="min-h-11 min-w-11 shrink-0 sm:min-h-9 sm:min-w-0"
+              aria-label={t("labs.addResult")}
+            >
+              <Plus className="h-4 w-4" />
+              <span className="hidden sm:inline">{t("labs.addResult")}</span>
+            </Button>
+          )}
         </div>
       </div>
 
@@ -429,9 +437,11 @@ export function LabBiomarkerDetail({ biomarkerId }: { biomarkerId: string }) {
               title={t("labs.detail.emptyTitle")}
               description={t("labs.detail.emptyDescription")}
               action={
-                <Button onClick={() => setAddOpen(true)}>
-                  {t("labs.addResult")}
-                </Button>
+                canAdd ? (
+                  <Button onClick={() => setAddOpen(true)}>
+                    {t("labs.addResult")}
+                  </Button>
+                ) : undefined
               }
             />
           </CardContent>
diff --git a/src/components/labs/lab-history-list.tsx b/src/components/labs/lab-history-list.tsx
index 5b547dd7a..329ce1561 100644
--- a/src/components/labs/lab-history-list.tsx
+++ b/src/components/labs/lab-history-list.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useMemo, useState } from "react";
 import { useMutation, useQueryClient } from "@tanstack/react-query";
 import { Loader2, Pencil } from "lucide-react";
@@ -74,6 +75,7 @@ function parseDecimal(raw: string): number | null {
  */
 export function LabHistoryList({ readings }: { readings: LabResultDto[] }) {
   const { t } = useTranslations();
+  const { canManage } = useRecordCapabilities();
   const queryClient = useQueryClient();
 
   // Client-side column sort over the in-memory reading feed.
@@ -361,17 +363,19 @@ export function LabHistoryList({ readings }: { readings: LabResultDto[] }) {
               </TableCell>
               <TableCell className="pr-4 text-right">
                 <div className="flex items-center justify-end gap-1">
-                  <Button
-                    size="icon"
-                    variant="ghost"
-                    // v1.18.10 (W10) — 44px touch target on mobile (WCAG
-                    // 2.5.5), compact 36px on desktop.
-                    className="size-11 sm:size-9"
-                    onClick={() => void openEdit(r)}
-                    aria-label={t("labs.editReading")}
-                  >
-                    <Pencil className="h-4 w-4" />
-                  </Button>
+                  {canManage && (
+                    <Button
+                      size="icon"
+                      variant="ghost"
+                      // v1.18.10 (W10) — 44px touch target on mobile (WCAG
+                      // 2.5.5), compact 36px on desktop.
+                      className="size-11 sm:size-9"
+                      onClick={() => void openEdit(r)}
+                      aria-label={t("labs.editReading")}
+                    >
+                      <Pencil className="h-4 w-4" />
+                    </Button>
+                  )}
                   <DeleteButton
                     onConfirm={() => deleteMutation.mutate(r.id)}
                     title={t("labs.deleteConfirmTitle")}
diff --git a/src/components/labs/lab-list.tsx b/src/components/labs/lab-list.tsx
index b96f62136..99573ec0b 100644
--- a/src/components/labs/lab-list.tsx
+++ b/src/components/labs/lab-list.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useMemo } from "react";
 import Link from "next/link";
 import { useQuery } from "@tanstack/react-query";
@@ -77,6 +78,7 @@ function groupReadings(results: LabResultDto[]): MarkerGroup[] {
 
 export function LabList({ onAddFirst }: { onAddFirst?: () => void } = {}) {
   const { t } = useTranslations();
+  const { canAdd } = useRecordCapabilities();
   const { prefs } = useModuleListPrefs("labs");
 
   // v1.22 — a short, factual line under each marker heading describing what the
@@ -167,7 +169,7 @@ export function LabList({ onAddFirst }: { onAddFirst?: () => void } = {}) {
         title={t("labs.emptyTitle")}
         description={t("labs.emptyDescription")}
         action={
-          onAddFirst ? (
+          onAddFirst && canAdd ? (
             <Button onClick={onAddFirst}>{t("labs.addFirst")}</Button>
           ) : undefined
         }
diff --git a/src/components/measurement-reminders/vorsorge-section.tsx b/src/components/measurement-reminders/vorsorge-section.tsx
index 941f66f29..3f0fa6413 100644
--- a/src/components/measurement-reminders/vorsorge-section.tsx
+++ b/src/components/measurement-reminders/vorsorge-section.tsx
@@ -28,6 +28,7 @@
  *     hosting the per-reminder enable/disable toggles (moved off the
  *     card so the card carries a single med-style kebab).
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useState } from "react";
 import Link from "next/link";
 import { useRouter } from "next/navigation";
@@ -219,6 +220,7 @@ export function VorsorgeSection({
   variant?: "settings" | "page";
 }) {
   const { t } = useTranslations();
+  const { canManage } = useRecordCapabilities();
   const router = useRouter();
   const {
     data: reminders,
@@ -359,7 +361,11 @@ export function VorsorgeSection({
 
   // v1.18.6 (MOD-02) — the primary add affordance reads "hinzufügen" like
   // every other module's add button.
-  const addButton = (
+  // v1.36.x — a checkup reminder belongs to the person whose schedule it is,
+  // and no grant level admits creating, editing or satisfying one. Inside
+  // somebody else's record the schedule stays readable and every control that
+  // would change it is absent.
+  const addButton = canManage ? (
     <Button
       type="button"
       className="min-h-11 shrink-0 sm:min-h-9"
@@ -368,13 +374,13 @@ export function VorsorgeSection({
       <Plus className="h-4 w-4" />
       {t("common.add")}
     </Button>
-  );
+  ) : null;
 
   // v1.18.6 (MOD-01) — the wrench links to the Vorsorge settings page (view,
   // reorder, per-reminder enable toggles), left of the Add button — the
   // canonical medication-page pattern. The old kebab "Anpassen" sheet is
   // gone (MOD-07); its toggles moved to the settings page.
-  const wrenchButton = (
+  const wrenchButton = canManage ? (
     <Button
       asChild
       variant="ghost"
@@ -389,7 +395,7 @@ export function VorsorgeSection({
         <Wrench className="h-4 w-4" aria-hidden="true" />
       </Link>
     </Button>
-  );
+  ) : null;
 
   return (
     <section aria-labelledby="vorsorge-section-title" className="space-y-4">
@@ -709,9 +715,11 @@ export function VorsorgeSection({
           title={t("measurementReminders.empty.title")}
           description={t("measurementReminders.empty.description")}
           action={
-            <Button type="button" onClick={openCreate}>
-              {t("common.add")}
-            </Button>
+            canManage ? (
+              <Button type="button" onClick={openCreate}>
+                {t("common.add")}
+              </Button>
+            ) : undefined
           }
         />
       )}
@@ -787,6 +795,7 @@ function VorsorgeCard({
 }) {
   const { t } = useTranslations();
   const fmt = useFormatters();
+  const { canManage } = useRecordCapabilities();
   // Issue #490 — day-boundary zone for the relative "today / yesterday"
   // bucket must match the zone `fmt.date` renders in (mirror → Berlin).
   // The next-due phrase reads off the SAME zone as the last-done date below
@@ -855,7 +864,7 @@ function VorsorgeCard({
 
   // Single med-style kebab: Edit + Delete. The Delete item is the shared
   // confirm-on-delete control rendered as a full-width menu row.
-  const headerActions = (
+  const headerActions = canManage ? (
     <DropdownMenu>
       <DropdownMenuTrigger asChild>
         <Button
@@ -898,14 +907,14 @@ function VorsorgeCard({
         </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
-  );
+  ) : null;
 
   // The measure / mark-done action. One constant appearance in every state —
   // no due-driven tint, no label swap (v1.27.5 retired the former green
   // "do it now" wash; a button that changes colour by schedule state reads as
   // a different control). Due-ness is communicated by the discreet coloured
   // next-due text above.
-  const primaryButton = (
+  const primaryButton = canManage ? (
     <Button
       type="button"
       className="min-h-11 w-full"
@@ -928,7 +937,7 @@ function VorsorgeCard({
         </>
       )}
     </Button>
-  );
+  ) : null;
 
   const deleteDialog = (
     <AlertDialog open={confirmDelete} onOpenChange={setConfirmDelete}>
@@ -1114,7 +1123,9 @@ function VorsorgeCard({
           )}
 
           {/* Bottom-pinned single primary action — green when due (MOD-06). */}
-          <div className="mt-auto pt-0">{primaryButton}</div>
+          {primaryButton ? (
+            <div className="mt-auto pt-0">{primaryButton}</div>
+          ) : null}
         </CardContent>
       </Card>
 
diff --git a/src/components/measurements/measurement-list.tsx b/src/components/measurements/measurement-list.tsx
index 3af1468de..912e9c5d7 100644
--- a/src/components/measurements/measurement-list.tsx
+++ b/src/components/measurements/measurement-list.tsx
@@ -1,8 +1,10 @@
 "use client";
 
+import { accountLabel } from "@/lib/sharing/account-access-view";
 import { useRouter } from "next/navigation";
 import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
 import { useAuth } from "@/hooks/use-auth";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { useIsMobile } from "@/hooks/use-is-mobile";
 import { Button } from "@/components/ui/button";
 import { Badge } from "@/components/ui/badge";
@@ -283,7 +285,20 @@ export function MeasurementList({
 }: MeasurementListProps) {
   const { t } = useTranslations();
   const fmt = useFormatters();
-  const { isAuthenticated } = useAuth();
+  const { isAuthenticated, user } = useAuth();
+  // v1.36.x — inside somebody else's record, only the add path survives:
+  // entering a reading is an admitted delegated write, editing and deleting
+  // one are not. The row controls are dropped rather than disabled.
+  const { canAdd, canManage, inSharedRecord, canWrite } =
+    useRecordCapabilities();
+  const activeRecord = user?.accountAccess?.active ?? null;
+  // Named only when the sentence below is owed: a delegate who may add but
+  // not change. In the caller's own record, and for a read-only delegate who
+  // was offered no add button to be surprised by, there is nothing to explain.
+  const delegateName =
+    inSharedRecord && canWrite && activeRecord
+      ? accountLabel(activeRecord)
+      : null;
   const unitDisplay = useUnitDisplay();
   // v1.32.26 — a single-reading row renders its value + unit in the user's
   // preferred unit (kg↔lb, cm↔in, °C↔°F). A canonical row converts through the
@@ -928,38 +943,58 @@ export function MeasurementList({
           // an outage never reads as "you have no measurements".
           <QueryErrorCard onRetry={() => void refetch()} />
         ) : !data?.measurements?.length ? (
-          // v1.4.15 phase-C5: replaces the bare-text empty rectangle.
-          // Filter-aware copy distinguishes brand-new accounts ("no
-          // measurements yet") from filtered-out lists ("no measurements
-          // match this filter") and exposes the right CTA for each
-          // case.
-          <EmptyState
-            icon={<Activity className="size-6" />}
-            title={
-              typeFilter === "ALL" || lockedType
-                ? t("measurements.emptyTitle")
-                : t("measurements.emptyFilteredTitle")
-            }
-            description={
-              typeFilter === "ALL" || lockedType
-                ? t("measurements.emptyDescription")
-                : t("measurements.emptyFilteredDescription")
-            }
-            action={
-              // v1.8.5 — a locked-type list has no "reset filter" path;
-              // the metric is fixed by the route.
-              typeFilter !== "ALL" && !lockedType ? (
-                <Button variant="outline" onClick={() => setTypeFilter("ALL")}>
-                  {t("measurements.emptyResetFilter")}
-                </Button>
-              ) : onAddFirst ? (
-                <Button onClick={onAddFirst}>
-                  <Plus className="h-4 w-4" />
-                  {t("measurements.emptyAddFirst")}
-                </Button>
-              ) : undefined
-            }
-          />
+          <>
+            {/* v1.4.15 phase-C5: replaces the bare-text empty rectangle.
+                Filter-aware copy distinguishes brand-new accounts ("no
+                measurements yet") from filtered-out lists ("no measurements
+                match this filter") and exposes the right CTA for each case. */}
+            <EmptyState
+              icon={<Activity className="size-6" />}
+              title={
+                typeFilter === "ALL" || lockedType
+                  ? t("measurements.emptyTitle")
+                  : t("measurements.emptyFilteredTitle")
+              }
+              description={
+                typeFilter === "ALL" || lockedType
+                  ? t("measurements.emptyDescription")
+                  : t("measurements.emptyFilteredDescription")
+              }
+              action={
+                // v1.8.5 — a locked-type list has no "reset filter" path;
+                // the metric is fixed by the route.
+                typeFilter !== "ALL" && !lockedType ? (
+                  <Button
+                    variant="outline"
+                    onClick={() => setTypeFilter("ALL")}
+                  >
+                    {t("measurements.emptyResetFilter")}
+                  </Button>
+                ) : onAddFirst && canAdd ? (
+                  <Button onClick={onAddFirst}>
+                    <Plus className="h-4 w-4" />
+                    {t("measurements.emptyAddFirst")}
+                  </Button>
+                ) : undefined
+              }
+            />
+            {/* The one place in the app the asymmetry is spelled out. A
+                delegate who may add will look for the edit control beside the
+                row they just entered, so the list that carries the add button
+                says once, in one muted line, where the limit is. Every other
+                hidden control stays silent: the banner already names the mode,
+                and a chip beside each absent button would be noise. */}
+            {delegateName && (
+              <p
+                data-slot="delegate-add-only-note"
+                className="text-muted-foreground mx-auto max-w-prose text-center text-xs"
+              >
+                {t("recordSharing.delegate.addOnlyNote", {
+                  name: delegateName,
+                })}
+              </p>
+            )}
+          </>
         ) : (
           <>
             {/* Desktop table — rendered only when not mobile (v1.28.42 H3). */}
@@ -978,19 +1013,23 @@ export function MeasurementList({
                   <TableHeader>
                     <TableRow>
                       <TableHead className="w-10 pl-4">
-                        {/* v1.15.13 — select-all-on-page header checkbox. */}
-                        <Checkbox
-                          checked={
-                            selectAll === "all"
-                              ? true
-                              : selectAll === "some"
-                                ? "indeterminate"
-                                : false
-                          }
-                          disabled={pageIds.length === 0}
-                          onCheckedChange={onToggleSelectAll}
-                          aria-label={t("dataList.selectAll")}
-                        />
+                        {/* v1.15.13 — select-all-on-page header checkbox.
+                            v1.36.x — bulk delete is the owner's alone, so a
+                            delegate gets no selection column. */}
+                        {canManage && (
+                          <Checkbox
+                            checked={
+                              selectAll === "all"
+                                ? true
+                                : selectAll === "some"
+                                  ? "indeterminate"
+                                  : false
+                            }
+                            disabled={pageIds.length === 0}
+                            onCheckedChange={onToggleSelectAll}
+                            aria-label={t("dataList.selectAll")}
+                          />
+                        )}
                       </TableHead>
                       <TableHead className="w-28">
                         {t("measurements.type")}
@@ -1051,7 +1090,7 @@ export function MeasurementList({
                             <TableCell className="pl-4">
                               {/* Grouped/synthetic rows aren't individually
                                 deletable, so they have no checkbox. */}
-                              {!isGrouped && (
+                              {!isGrouped && canManage && (
                                 <Checkbox
                                   checked={isSelected}
                                   onCheckedChange={() => onToggleRow(m.id)}
@@ -1178,15 +1217,17 @@ export function MeasurementList({
                                   </Button>
                                 ) : (
                                   <>
-                                    <Button
-                                      variant="ghost"
-                                      size="icon"
-                                      className="h-10 w-10"
-                                      onClick={() => startEdit(m)}
-                                      aria-label={t("common.edit")}
-                                    >
-                                      <Pencil className="h-3.5 w-3.5" />
-                                    </Button>
+                                    {canManage && (
+                                      <Button
+                                        variant="ghost"
+                                        size="icon"
+                                        className="h-10 w-10"
+                                        onClick={() => startEdit(m)}
+                                        aria-label={t("common.edit")}
+                                      >
+                                        <Pencil className="h-3.5 w-3.5" />
+                                      </Button>
+                                    )}
                                     <DeleteButton
                                       onConfirm={() =>
                                         deleteMutation.mutate(m.id)
@@ -1247,7 +1288,7 @@ export function MeasurementList({
                         <div className="flex items-center gap-2 overflow-hidden">
                           {/* v1.15.13 — multi-select checkbox in a 44px tap
                             target; absent for synthetic grouped rows. */}
-                          {!isGrouped && (
+                          {!isGrouped && canManage && (
                             // v1.15.13 MEDIUM-1 kept the 16px Radix Checkbox
                             // (itself a `<button role=checkbox>`) inside a
                             // 44px wrapper `<button>` for WCAG 2.5.5 — but a
@@ -1375,14 +1416,16 @@ export function MeasurementList({
                             </Button>
                           ) : (
                             <>
-                              <Button
-                                variant="ghost"
-                                size="icon-lg"
-                                onClick={() => startEdit(m)}
-                                aria-label={t("common.edit")}
-                              >
-                                <Pencil className="h-4 w-4" />
-                              </Button>
+                              {canManage && (
+                                <Button
+                                  variant="ghost"
+                                  size="icon-lg"
+                                  onClick={() => startEdit(m)}
+                                  aria-label={t("common.edit")}
+                                >
+                                  <Pencil className="h-4 w-4" />
+                                </Button>
+                              )}
                               <DeleteButton
                                 iconClassName="h-4 w-4"
                                 onConfirm={() => deleteMutation.mutate(m.id)}
diff --git a/src/components/mental-health/instrument-card.tsx b/src/components/mental-health/instrument-card.tsx
index 82642056b..4c3850b3a 100644
--- a/src/components/mental-health/instrument-card.tsx
+++ b/src/components/mental-health/instrument-card.tsx
@@ -39,6 +39,7 @@ import {
   PopoverContent,
   PopoverTrigger,
 } from "@/components/ui/popover";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { MedicationCardHeader } from "@/components/medications/medication-card-header";
 import {
   useFormatters,
@@ -71,6 +72,10 @@ export function InstrumentCard({
 }) {
   const { t, locale } = useTranslations();
   const { date: formatDate } = useFormatters();
+  // v1.36.x — a screener is answered by the person it is about. No grant
+  // level admits it, so inside somebody else's record the card reads as
+  // history and carries no way to start one.
+  const { canManage } = useRecordCapabilities();
   // Issue #490 — day-boundary zone for the relative "today / yesterday"
   // bucket must match the zone `formatDate` renders in (mirror → Berlin).
   const displayTz = useDisplayTimezone();
@@ -173,11 +178,13 @@ export function InstrumentCard({
         {/* Bottom-pinned single primary action — the med-/Vorsorge card slot.
             Nothing sits below it now: the attribution moved to the header's
             info control, so the Start button stands alone with clean space. */}
-        <div className="mt-auto pt-0">
-          <Button type="button" className="min-h-11 w-full" onClick={onStart}>
-            {t("mentalHealth.start")}
-          </Button>
-        </div>
+        {canManage && (
+          <div className="mt-auto pt-0">
+            <Button type="button" className="min-h-11 w-full" onClick={onStart}>
+              {t("mentalHealth.start")}
+            </Button>
+          </div>
+        )}
       </CardContent>
     </Card>
   );
diff --git a/src/components/mental-health/instrument-detail.tsx b/src/components/mental-health/instrument-detail.tsx
index 385f2b40f..077309011 100644
--- a/src/components/mental-health/instrument-detail.tsx
+++ b/src/components/mental-health/instrument-detail.tsx
@@ -10,6 +10,7 @@
  * landing stays a quiet card grid, so the trend is opt-in behind a
  * deliberate click, never pushed at the moment someone arrives to check in.
  */
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { Button } from "@/components/ui/button";
 import {
   useFormatters,
@@ -35,6 +36,8 @@ export function InstrumentDetail({
 }) {
   const { t } = useTranslations();
   const { date: formatDate } = useFormatters();
+  // v1.36.x — see the card: starting a screener is not a delegated verb.
+  const { canManage } = useRecordCapabilities();
   // Issue #490 — day-boundary zone for the relative "today / yesterday"
   // bucket must match the zone `formatDate` renders in (mirror → Berlin).
   const displayTz = useDisplayTimezone();
@@ -73,14 +76,16 @@ export function InstrumentDetail({
 
       {/* The Start action stays reachable here too — the detail is a calm
           reading surface, not a dead end. */}
-      <Button
-        type="button"
-        className="min-h-11 w-full"
-        onClick={onStart}
-        data-slot="instrument-detail-start"
-      >
-        {t("mentalHealth.start")}
-      </Button>
+      {canManage && (
+        <Button
+          type="button"
+          className="min-h-11 w-full"
+          onClick={onStart}
+          data-slot="instrument-detail-start"
+        >
+          {t("mentalHealth.start")}
+        </Button>
+      )}
 
       <AssessmentHistory rows={rows} instrument={instrument} />
 
diff --git a/src/components/mood/mood-list.tsx b/src/components/mood/mood-list.tsx
index 554b15cf3..7cd920d1c 100644
--- a/src/components/mood/mood-list.tsx
+++ b/src/components/mood/mood-list.tsx
@@ -2,6 +2,7 @@
 
 import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
 import { useAuth } from "@/hooks/use-auth";
+import { useRecordCapabilities } from "@/hooks/use-record-capabilities";
 import { Button } from "@/components/ui/button";
 import { Badge } from "@/components/ui/badge";
 import { EmptyState } from "@/components/ui/empty-state";
@@ -139,6 +140,9 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
   const { t } = useTranslations();
   const fmt = useFormatters();
   const { isAuthenticated } = useAuth();
+  // v1.36.x — mood is not a delegated verb. Inside somebody else's record the
+  // list stays readable and every control that would change it is absent.
+  const { canManage } = useRecordCapabilities();
   const queryClient = useQueryClient();
   const [moodFilter, setMoodFilterRaw] = useState<string>("ALL");
   // v1.15.13 — management-list source filter + optional date range.
@@ -618,7 +622,7 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
                 >
                   {t("mood.emptyResetFilter")}
                 </Button>
-              ) : onAddFirst ? (
+              ) : onAddFirst && canManage ? (
                 <Button size="sm" onClick={onAddFirst}>
                   <Plus className="h-4 w-4" />
                   {t("mood.emptyAddFirst")}
@@ -644,18 +648,20 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
                   <TableRow>
                     <TableHead className="w-10 pl-4">
                       {/* v1.15.13 — select-all-on-page header checkbox. */}
-                      <Checkbox
-                        checked={
-                          selectAll === "all"
-                            ? true
-                            : selectAll === "some"
-                              ? "indeterminate"
-                              : false
-                        }
-                        disabled={pageIds.length === 0}
-                        onCheckedChange={onToggleSelectAll}
-                        aria-label={t("dataList.selectAll")}
-                      />
+                      {canManage && (
+                        <Checkbox
+                          checked={
+                            selectAll === "all"
+                              ? true
+                              : selectAll === "some"
+                                ? "indeterminate"
+                                : false
+                          }
+                          disabled={pageIds.length === 0}
+                          onCheckedChange={onToggleSelectAll}
+                          aria-label={t("dataList.selectAll")}
+                        />
+                      )}
                     </TableHead>
                     <SortableHead
                       column="mood"
@@ -695,11 +701,13 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
                         data-state={isSelected ? "selected" : undefined}
                       >
                         <TableCell className="pl-4">
-                          <Checkbox
-                            checked={isSelected}
-                            onCheckedChange={() => onToggleRow(entry.id)}
-                            aria-label={t("dataList.selectRow")}
-                          />
+                          {canManage && (
+                            <Checkbox
+                              checked={isSelected}
+                              onCheckedChange={() => onToggleRow(entry.id)}
+                              aria-label={t("dataList.selectRow")}
+                            />
+                          )}
                         </TableCell>
                         <TableCell className="font-semibold tabular-nums">
                           {entry.score}{" "}
@@ -737,15 +745,17 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
                         </TableCell>
                         <TableCell className="pr-4 text-right">
                           <div className="flex items-center justify-end gap-1">
-                            <Button
-                              variant="ghost"
-                              size="icon"
-                              className="h-8 w-8"
-                              onClick={() => startEdit(entry)}
-                              aria-label={t("common.edit")}
-                            >
-                              <Pencil className="h-3.5 w-3.5" />
-                            </Button>
+                            {canManage && (
+                              <Button
+                                variant="ghost"
+                                size="icon"
+                                className="h-8 w-8"
+                                onClick={() => startEdit(entry)}
+                                aria-label={t("common.edit")}
+                              >
+                                <Pencil className="h-3.5 w-3.5" />
+                              </Button>
+                            )}
                             <DeleteButton
                               onConfirm={() => deleteMutation.mutate(entry.id)}
                               title={t("mood.deleteConfirmTitle")}
@@ -789,14 +799,16 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
                         stays the single control and owns the 44px hit area
                         via an `after` hit-slop (clicks on a pseudo-element
                         hit-test against its host button). */}
-                      <div className="flex size-11 shrink-0 items-center justify-center">
-                        <Checkbox
-                          checked={isSelected}
-                          onCheckedChange={() => onToggleRow(entry.id)}
-                          aria-label={t("dataList.selectRow")}
-                          className="relative after:absolute after:-inset-3.5"
-                        />
-                      </div>
+                      {canManage && (
+                        <div className="flex size-11 shrink-0 items-center justify-center">
+                          <Checkbox
+                            checked={isSelected}
+                            onCheckedChange={() => onToggleRow(entry.id)}
+                            aria-label={t("dataList.selectRow")}
+                            className="relative after:absolute after:-inset-3.5"
+                          />
+                        </div>
+                      )}
                       <div className="bg-muted flex h-8 w-8 shrink-0 items-center justify-center rounded-lg">
                         <span
                           data-testid="mood-row-score"
@@ -834,15 +846,17 @@ export function MoodList({ onAddFirst }: MoodListProps = {}) {
                         and delete actions meet WCAG 2.5.5 on touch
                         devices. The desktop table keeps its denser
                         h-8 w-8 since pointer targets allow it. */}
-                      <Button
-                        variant="ghost"
-                        size="icon"
-                        className="min-h-11 min-w-11"
-                        onClick={() => startEdit(entry)}
-                        aria-label={t("common.edit")}
-                      >
-                        <Pencil className="h-4 w-4" />
-                      </Button>
+                      {canManage && (
+                        <Button
+                          variant="ghost"
+                          size="icon"
+                          className="min-h-11 min-w-11"
+                          onClick={() => startEdit(entry)}
+                          aria-label={t("common.edit")}
+                        >
+                          <Pencil className="h-4 w-4" />
+                        </Button>
+                      )}
                       <DeleteButton
                         onConfirm={() => deleteMutation.mutate(entry.id)}
                         iconClassName="h-4 w-4"