Browser capabilities delegated to the app's embedded iframes via the Permissions Policy allow attribute. Supported values: camera, microphone, geolocation. Defaults to [] (no delegation). The end user still sees the browser's own permission prompt for each capability. Changes apply the next time a surface is embedded — already-open surfaces must be reloaded.