Existing control text

When a CI/CD task is executed with no permissions specified, the project's version control system MUST default to the lowest available permissions for all activities in the pipeline.

Issues with the existing text

• "CI/CD task" could be more clear, AC-04.02 refers mainly to "job"
• CI/CD activities occur in CI/CD platforms/pipelines, but "version control system MUST" muddies the waters. This may have been written with GitHub Actions in mind specifically.