Permission before retrieval
Each search runs over the pages that principal can read. A restricted page is absent, not merely hidden.
Company knowledge / evidence workspace
Ask across the business.
See the evidence.
A permission-aware workspace for contracts, policies, work orders and handovers. Search only what each person can read, inspect the exact source, and keep review and audit state attached to the answer.
The public instance uses invented company records and licensed historical references. It is read-only and separate from every private pilot. No account is required.
Browser-only walkthrough
Change the role. Watch the boundary move.
The page contains invented records only. It does not call the workspace API. The live demo runs the same interaction against a separate fictional corpus.
Question
Who owns WO-2026-0038, and what is its target date?
Evidence answer · 2 exact claims · owner scope
“Owner: Imani Cole.”WO-2026-0038 · exact retained citation
“Recorded date 2026-11-04; target date 2026-11-11.”WO-2026-0038 · exact retained citation
Owner can also open the review, audit and source controls for these pages.
Question
What does the record say about Banksia?
Bounded record summary · one exact quote per page
Baseline agreementEffective 2026-02-01; end 2027-01-31
Account briefOwner Ava Rossi; value AUD 960,000
Pricing schedule v2AUD 198 per site from 1 October
The summary names the page and keeps each quotation exact. It does not merge different records into one fact.
Question
What is Summit Cold Storage's public liability certificate number?
No answer found in readable evidence
The workspace can show the recorded liability requirement and the documented evidence gap, but it will not invent a certificate number.
A missing result is not proof that the information does not exist outside this corpus.
Question
What does the record say about Kestrel?
Restricted record · visible to this role
“Kestrel Advisory is a fictional confidential site transition customer.”Kestrel account brief · restricted source
The public demo contains no real confidential matter. This card demonstrates the scope label only.
Question
Who owns WO-2026-0038, and what is its target date?
Evidence answer · review controls available
“Owner: Imani Cole.”WO-2026-0038 · exact retained citation
“Recorded date 2026-11-04; target date 2026-11-11.”WO-2026-0038 · exact retained citation
A review binds the exact content and citations. A later change makes the review stale instead of silently approving the new text.
Question
What does the record say about Kestrel?
Restricted record · visible to this role
“Kestrel Advisory is a fictional confidential site transition customer.”Kestrel account brief · restricted source
Reviewer can inspect and decide on the restricted page. Viewer cannot see it at all.
Question
Who owns WO-2026-0038, and what is its target date?
Evidence answer · read-only scope
“Owner: Imani Cole.”WO-2026-0038 · exact retained citation
“Recorded date 2026-11-04; target date 2026-11-11.”WO-2026-0038 · exact retained citation
Viewer can search and export readable evidence. Review, audit and source administration are not available.
Question
What does the record say about Kestrel?
Not in this role's readable page set
The restricted page is absent from search, aliases and counts. It is not a hidden row that the interface could reveal later.
Permission is enforced before retrieval, not by hiding a result after it was found.
Why this is different
A source trail, not a confident paragraph.
The workspace is deliberately evidence-first. It can consolidate a field across records, show a gap or label a conflict; it does not decide legal effect or invent a missing value.
Exact, replayable citations
Every quoted sentence carries its page, source and offsets so a reviewer can return to the recorded text.
Review binds to content
Approval is tied to the exact text and citations. New content makes the old review stale.
Gaps stay gaps
When the evidence does not contain the requested value, the answer says so instead of filling the space.
Public boundary
What the live demo is—and is not.
In the public instance
- Invented company records and licensed historical references
- Read-only guest access to the fictional baseline
- Permission-aware search and exact citations
- Fictional review, audit and export workflow
Never in the public instance
- Customer records, private pilots or participant accounts
- Microsoft 365, Google Drive or email connectors
- Administrator functions, internal services or secrets
- Real restricted material or unredacted personal data
Private pilots keep separate tenants, credentials, indexes, permissions, consent and audit records. A branded sign-in for a private pilot is added only after its HTTPS callback, account access and origin-bypass checks pass.
Try it with invented records
Open the live workspace.
The public demo is read-only. Start with the document portfolio or ask a work-order question, then inspect the citation behind the answer.