Compare complete domain structures and derive restricted audiences from normalized membership. Remove event-ID epochs from execution domains and resource labels while preserving retained session restrictions.
Signed-off-by: Jordan Mecom <jm@squareup.com>