Sudo allows any transaction to pass. It’s the default only for a session that scopes nothing: no permissions, actions, crossChainPermits, or swap. Such a session accepts everything, and session.access.kind is "open".
Examples on this page use @rhinestone/sdk, where rhinestone is the RhinestoneSDK instance from Create a session with a custom setup.
A session holding a cross-chain permit is scoped. It gets a sudo wildcard only when you opt in with fallback: "sudo".
Always restrict sessions to the minimum permissions you need. A sudo session
has the same authority as the account owner.