AKAC · rules for access and knowledge
AKAC checks which identity may access which source. Derived content and later retrieval remain bound to source permissions.

- A deterministic decision path checks identity, purpose, grants and classification.
- Every candidate is checked again before release; a vector index does not grant read access.
- Derived documents, memory and outputs inherit source classification.