Exactly the scopes and limits written into that grant, until its expiry, and nothing more. An attacker cannot widen it, because a widened chain fails the attenuation check at every verifier — the blast radius is set when the grant is issued rather than when the breach is discovered.