workspace-scope · applies to every membership · +0 grants / -0 revokes
Removes the row from permission_templates and writes an audit entry. Memberships return to their role defaults immediately. There's no soft-delete column on this table; the row is gone for good.