IT SYSTEMS / DOCS
AKAC: check access before search and release
AKAC is a separate access layer for sources, tools and derived content. A search result is not a read permission.
Before reading
Identity, purpose, role, attributes and classification are checked against deterministic policy before an agent receives content.
Before release
Permission is checked again after retrieval. Derived summaries and memory retain the rights and provenance of their sources.
Integration
A reference implementation does not replace integration with each organisation’s identity, document storage, retrieval and audit systems.