Cordon · derived-knowledge access control
Every fact below was derived from more than one repository, so no single document’s permissions govern it. Pick a principal and watch three gates disagree about what that person may be told.
Every row below is knowledge no document contains. Document-level ACLs cannot describe these, because they are not documents — which is why an ungated assistant serves them to everyone.