Summary
Scenarios
LEAK [S1] bob@acme — Project Atlas architecture and design decisions → leaks: acme-atlas-01, acme-atlas-02, acme-atlas-03, acme-atlas-04, acme-atlas-05
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.764 | acme-atlas-01 | acme | DENY | LEAK |
| 1 | 0.612 | acme-atlas-04 | acme | DENY | LEAK |
| 2 | 0.513 | acme-atlas-02 | acme | DENY | LEAK |
| 3 | 0.51 | acme-atlas-03 | acme | DENY | LEAK |
| 4 | 0.489 | acme-atlas-05 | acme | DENY | LEAK |
| 5 | 0.123 | acme-kb-troubleshooting | acme | ALLOW | PASS |
| 6 | 0.0 | acme-kb-integrations | acme | ALLOW | PASS |
| 7 | 0.0 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 8 | 0.0 | globex-sales-renewal | globex | DENY | NEAR_MISS |
| 9 | 0.0 | globex-sales-quote-template | globex | DENY | NEAR_MISS |
LEAK [S1] bob@acme — Atlas delivery milestones and timeline → leaks: acme-atlas-01, acme-atlas-02, acme-atlas-03, acme-atlas-04, acme-atlas-05
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.782 | acme-atlas-02 | acme | DENY | LEAK |
| 1 | 0.415 | acme-atlas-03 | acme | DENY | LEAK |
| 2 | 0.398 | acme-atlas-05 | acme | DENY | LEAK |
| 3 | 0.38 | acme-atlas-01 | acme | DENY | LEAK |
| 4 | 0.342 | acme-atlas-04 | acme | DENY | LEAK |
| 5 | 0.152 | globex-logistics-routing | globex | DENY | NEAR_MISS |
| 6 | 0.14 | globex-logistics-carrier-scorecards | globex | DENY | NEAR_MISS |
| 7 | 0.14 | acme-kb-webhooks | acme | ALLOW | PASS |
| 8 | 0.134 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 9 | 0.134 | acme-sales-sow | acme | DENY | NEAR_MISS |
LEAK [S1] bob@acme — Atlas risk log and open issues → leaks: acme-atlas-02, acme-atlas-03, acme-atlas-05
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.603 | acme-atlas-03 | acme | DENY | LEAK |
| 1 | 0.326 | acme-atlas-02 | acme | DENY | LEAK |
| 2 | 0.311 | acme-atlas-05 | acme | DENY | LEAK |
| 3 | 0.297 | acme-atlas-01 | acme | DENY | NEAR_MISS |
| 4 | 0.255 | acme-atlas-04 | acme | DENY | NEAR_MISS |
| 5 | 0.116 | globex-sales-renewal | globex | DENY | NEAR_MISS |
| 6 | 0.116 | acme-sales-renewal | acme | DENY | NEAR_MISS |
| 7 | 0.0 | globex-operations-maintenance-plan | globex | DENY | NEAR_MISS |
| 8 | 0.0 | globex-logistics-returns | globex | DENY | NEAR_MISS |
| 9 | 0.0 | acme-kb-integrations | acme | ALLOW | PASS |
LEAK [S1] bob@acme — Atlas launch and go-to-market plan → leaks: acme-atlas-02, acme-atlas-03, acme-atlas-04, acme-atlas-05
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.756 | acme-atlas-05 | acme | DENY | LEAK |
| 1 | 0.357 | acme-atlas-04 | acme | DENY | LEAK |
| 2 | 0.326 | acme-atlas-02 | acme | DENY | LEAK |
| 3 | 0.325 | acme-atlas-03 | acme | DENY | LEAK |
| 4 | 0.297 | acme-atlas-01 | acme | DENY | NEAR_MISS |
| 5 | 0.237 | globex-operations-procurement | globex | DENY | NEAR_MISS |
| 6 | 0.203 | globex-operations-production-plan | globex | DENY | NEAR_MISS |
| 7 | 0.168 | acme-kb-login | acme | ALLOW | PASS |
| 8 | 0.125 | globex-logistics-carrier-scorecards | globex | DENY | NEAR_MISS |
| 9 | 0.12 | globex-facilities-space-planning | globex | DENY | NEAR_MISS |
LEAK [S1] bob@acme — engineering coding standards and code review guidelines → leaks: acme-eng-security-review, acme-eng-standards
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.536 | acme-eng-standards | acme | DENY | LEAK |
| 1 | 0.316 | acme-eng-security-review | acme | DENY | LEAK |
| 2 | 0.171 | acme-eng-oncall | acme | DENY | NEAR_MISS |
| 3 | 0.14 | acme-atlas-04 | acme | DENY | NEAR_MISS |
| 4 | 0.118 | globex-facilities-janitorial | globex | DENY | NEAR_MISS |
| 5 | 0.105 | acme-hr-hiring | acme | DENY | NEAR_MISS |
| 6 | 0.098 | globex-logistics-cold-chain | globex | DENY | NEAR_MISS |
| 7 | 0.087 | acme-hr-comp-bands | acme | DENY | NEAR_MISS |
| 8 | 0.06 | acme-eng-incident-runbook | acme | DENY | NEAR_MISS |
| 9 | 0.06 | acme-eng-deploy-process | acme | DENY | NEAR_MISS |
LEAK [S1] bob@acme — incident runbook severity levels and on-call escalation → leaks: acme-eng-incident-runbook
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.476 | acme-eng-incident-runbook | acme | DENY | LEAK |
| 1 | 0.286 | acme-eng-oncall | acme | DENY | NEAR_MISS |
| 2 | 0.112 | globex-logistics-inventory | globex | DENY | NEAR_MISS |
| 3 | 0.087 | acme-hr-comp-bands | acme | DENY | NEAR_MISS |
| 4 | 0.085 | acme-atlas-03 | acme | DENY | NEAR_MISS |
| 5 | 0.0 | globex-operations-maintenance-plan | globex | DENY | NEAR_MISS |
| 6 | 0.0 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 7 | 0.0 | globex-sales-renewal | globex | DENY | NEAR_MISS |
| 8 | 0.0 | globex-sales-quote-template | globex | DENY | NEAR_MISS |
| 9 | 0.0 | globex-sales-nda | globex | DENY | NEAR_MISS |
LEAK [S2] frank@acme — standard per-seat pricing tiers and volume discount schedule → leaks: globex-sales-01, globex-sales-discount-policy
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.664 | globex-sales-01 | globex | DENY | LEAK |
| 1 | 0.664 | acme-sales-01 | acme | ALLOW | PASS |
| 2 | 0.354 | globex-sales-discount-policy | globex | DENY | LEAK |
| 3 | 0.354 | acme-sales-discount-policy | acme | ALLOW | PASS |
| 4 | 0.099 | acme-eng-oncall | acme | DENY | NEAR_MISS |
| 5 | 0.095 | globex-operations-maintenance-plan | globex | DENY | NEAR_MISS |
| 6 | 0.091 | acme-hr-pto-policy | acme | DENY | NEAR_MISS |
| 7 | 0.051 | globex-facilities-janitorial | globex | DENY | NEAR_MISS |
| 8 | 0.05 | globex-sales-partner-agreement | globex | DENY | NEAR_MISS |
| 9 | 0.05 | acme-sales-partner-agreement | acme | ALLOW | PASS |
LEAK [S2] frank@acme — master services agreement liability and indemnification terms → leaks: globex-sales-msa
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.804 | globex-sales-msa | globex | DENY | LEAK |
| 1 | 0.804 | acme-sales-msa | acme | ALLOW | PASS |
| 2 | 0.231 | globex-sales-partner-agreement | globex | DENY | NEAR_MISS |
| 3 | 0.231 | acme-sales-partner-agreement | acme | ALLOW | PASS |
| 4 | 0.17 | globex-sales-nda | globex | DENY | NEAR_MISS |
| 5 | 0.17 | acme-sales-nda | acme | ALLOW | PASS |
| 6 | 0.164 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 7 | 0.164 | acme-sales-sow | acme | ALLOW | PASS |
| 8 | 0.149 | globex-sales-quote-template | globex | DENY | NEAR_MISS |
| 9 | 0.149 | acme-sales-quote-template | acme | ALLOW | PASS |
LEAK [S2] frank@acme — statement of work deliverables milestones and fees → leaks: globex-sales-sow
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.717 | globex-sales-sow | globex | DENY | LEAK |
| 1 | 0.717 | acme-sales-sow | acme | ALLOW | PASS |
| 2 | 0.196 | globex-operations-shift-schedule | globex | DENY | NEAR_MISS |
| 3 | 0.179 | acme-hr-remote-work | acme | DENY | NEAR_MISS |
| 4 | 0.14 | acme-atlas-02 | acme | DENY | NEAR_MISS |
| 5 | 0.13 | acme-eng-deploy-process | acme | DENY | NEAR_MISS |
| 6 | 0.115 | globex-logistics-customs | globex | DENY | NEAR_MISS |
| 7 | 0.101 | globex-operations-production-plan | globex | DENY | NEAR_MISS |
| 8 | 0.0 | globex-operations-qa | globex | DENY | NEAR_MISS |
| 9 | 0.0 | globex-logistics-receiving | globex | DENY | NEAR_MISS |
LEAK [S2] frank@acme — renewal uplift percentages and churn negotiation guidance → leaks: globex-sales-renewal
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.691 | globex-sales-renewal | globex | DENY | LEAK |
| 1 | 0.691 | acme-sales-renewal | acme | ALLOW | PASS |
| 2 | 0.058 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 3 | 0.058 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 4 | 0.056 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 5 | 0.053 | acme-roadmap-platform-bets | acme | ALLOW | PASS |
| 6 | 0.051 | acme-roadmap-product-vision | acme | ALLOW | PASS |
| 7 | 0.038 | acme-roadmap-01 | acme | DENY | NEAR_MISS |
| 8 | 0.0 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 9 | 0.0 | globex-sales-quote-template | globex | DENY | NEAR_MISS |
LEAK [S2] carol@globex — per-seat pricing tiers and volume discount schedule → leaks: acme-sales-01, acme-sales-discount-policy
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.668 | globex-sales-01 | globex | ALLOW | PASS |
| 1 | 0.668 | acme-sales-01 | acme | DENY | LEAK |
| 2 | 0.378 | globex-sales-discount-policy | globex | ALLOW | PASS |
| 3 | 0.378 | acme-sales-discount-policy | acme | DENY | LEAK |
| 4 | 0.106 | acme-eng-oncall | acme | DENY | NEAR_MISS |
| 5 | 0.102 | globex-operations-maintenance-plan | globex | DENY | NEAR_MISS |
| 6 | 0.097 | acme-hr-pto-policy | acme | DENY | NEAR_MISS |
| 7 | 0.055 | globex-facilities-janitorial | globex | ALLOW | PASS |
| 8 | 0.053 | globex-sales-partner-agreement | globex | ALLOW | PASS |
| 9 | 0.053 | acme-sales-partner-agreement | acme | DENY | NEAR_MISS |
LEAK [S2] carol@globex — quote and order form billing frequency and payment terms → leaks: acme-sales-quote-template
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.688 | globex-sales-quote-template | globex | ALLOW | PASS |
| 1 | 0.688 | acme-sales-quote-template | acme | DENY | LEAK |
| 2 | 0.265 | acme-kb-billing | acme | DENY | NEAR_MISS |
| 3 | 0.107 | globex-sales-partner-agreement | globex | ALLOW | PASS |
| 4 | 0.107 | acme-sales-partner-agreement | acme | DENY | NEAR_MISS |
| 5 | 0.106 | globex-logistics-carrier-scorecards | globex | DENY | NEAR_MISS |
| 6 | 0.093 | globex-sales-msa | globex | ALLOW | PASS |
| 7 | 0.093 | acme-sales-msa | acme | DENY | NEAR_MISS |
| 8 | 0.083 | globex-sales-01 | globex | ALLOW | PASS |
| 9 | 0.083 | acme-sales-01 | acme | DENY | NEAR_MISS |
LEAK [S3] grace@acme — annual company-wide product roadmap and headline features → leaks: acme-roadmap-01
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.708 | acme-roadmap-01 | acme | DENY | LEAK |
| 1 | 0.374 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 2 | 0.36 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 3 | 0.286 | acme-roadmap-product-vision | acme | ALLOW | PASS |
| 4 | 0.27 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 5 | 0.214 | globex-operations-production-plan | globex | DENY | NEAR_MISS |
| 6 | 0.148 | acme-roadmap-platform-bets | acme | ALLOW | PASS |
| 7 | 0.125 | globex-sales-01 | globex | DENY | NEAR_MISS |
| 8 | 0.125 | acme-sales-01 | acme | DENY | NEAR_MISS |
| 9 | 0.099 | acme-hr-review-cycle | acme | DENY | NEAR_MISS |
LEAK [S3] bob@acme — product roadmap strategy for the year and launch quarters → leaks: acme-roadmap-01
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.65 | acme-roadmap-01 | acme | DENY | LEAK |
| 1 | 0.411 | acme-roadmap-product-vision | acme | ALLOW | PASS |
| 2 | 0.289 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 3 | 0.278 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 4 | 0.175 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 5 | 0.159 | acme-roadmap-platform-bets | acme | ALLOW | PASS |
| 6 | 0.122 | acme-atlas-05 | acme | DENY | NEAR_MISS |
| 7 | 0.114 | globex-logistics-carrier-scorecards | globex | DENY | NEAR_MISS |
| 8 | 0.107 | acme-hr-review-cycle | acme | DENY | NEAR_MISS |
| 9 | 0.057 | acme-kb-webhooks | acme | ALLOW | PASS |
LEAK [S3] eve@acme — company roadmap bets and headline features for the year → leaks: acme-roadmap-01
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.65 | acme-roadmap-01 | acme | DENY | LEAK |
| 1 | 0.346 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 2 | 0.333 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 3 | 0.233 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 4 | 0.213 | acme-roadmap-platform-bets | acme | ALLOW | PASS |
| 5 | 0.107 | acme-hr-review-cycle | acme | ALLOW | PASS |
| 6 | 0.103 | acme-roadmap-product-vision | acme | ALLOW | PASS |
| 7 | 0.057 | globex-sales-nda | globex | DENY | NEAR_MISS |
| 8 | 0.057 | acme-sales-nda | acme | DENY | NEAR_MISS |
| 9 | 0.055 | globex-sales-sow | globex | DENY | NEAR_MISS |
LEAK [S3] frank@acme — annual product roadmap company-wide plan → leaks: acme-roadmap-01, globex-operations-production-plan
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.574 | acme-roadmap-01 | acme | DENY | LEAK |
| 1 | 0.37 | globex-operations-production-plan | globex | DENY | LEAK |
| 2 | 0.289 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 3 | 0.278 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 4 | 0.257 | acme-roadmap-product-vision | acme | ALLOW | PASS |
| 5 | 0.204 | acme-kb-login | acme | ALLOW | PASS |
| 6 | 0.175 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 7 | 0.135 | globex-sales-01 | globex | DENY | NEAR_MISS |
| 8 | 0.135 | acme-sales-01 | acme | ALLOW | PASS |
| 9 | 0.122 | acme-atlas-05 | acme | DENY | NEAR_MISS |
PASS [NEG] alice@acme — Project Atlas architecture and design decisions
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.764 | acme-atlas-01 | acme | ALLOW | PASS |
| 1 | 0.612 | acme-atlas-04 | acme | ALLOW | PASS |
| 2 | 0.513 | acme-atlas-02 | acme | ALLOW | PASS |
| 3 | 0.51 | acme-atlas-03 | acme | ALLOW | PASS |
| 4 | 0.489 | acme-atlas-05 | acme | ALLOW | PASS |
| 5 | 0.123 | acme-kb-troubleshooting | acme | ALLOW | PASS |
| 6 | 0.0 | acme-kb-integrations | acme | ALLOW | PASS |
| 7 | 0.0 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 8 | 0.0 | globex-sales-renewal | globex | DENY | NEAR_MISS |
| 9 | 0.0 | globex-sales-quote-template | globex | DENY | NEAR_MISS |
PASS [NEG] alice@acme — Atlas milestones risks and launch plan
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.578 | acme-atlas-05 | acme | ALLOW | PASS |
| 1 | 0.466 | acme-atlas-02 | acme | ALLOW | PASS |
| 2 | 0.417 | acme-atlas-03 | acme | ALLOW | PASS |
| 3 | 0.357 | acme-atlas-04 | acme | ALLOW | PASS |
| 4 | 0.297 | acme-atlas-01 | acme | ALLOW | PASS |
| 5 | 0.183 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 6 | 0.168 | acme-kb-login | acme | ALLOW | PASS |
| 7 | 0.152 | globex-operations-production-plan | globex | DENY | NEAR_MISS |
| 8 | 0.125 | globex-logistics-carrier-scorecards | globex | DENY | NEAR_MISS |
| 9 | 0.12 | globex-sales-sow | globex | DENY | NEAR_MISS |
PASS [NEG] dana@acme — annual company-wide product roadmap headline features
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.708 | acme-roadmap-01 | acme | ALLOW | PASS |
| 1 | 0.374 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 2 | 0.36 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 3 | 0.286 | acme-roadmap-product-vision | acme | ALLOW | PASS |
| 4 | 0.27 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 5 | 0.214 | globex-operations-production-plan | globex | DENY | NEAR_MISS |
| 6 | 0.148 | acme-roadmap-platform-bets | acme | ALLOW | PASS |
| 7 | 0.125 | globex-sales-01 | globex | DENY | NEAR_MISS |
| 8 | 0.125 | acme-sales-01 | acme | DENY | NEAR_MISS |
| 9 | 0.099 | acme-hr-review-cycle | acme | DENY | NEAR_MISS |
PASS [NEG] eve@acme — compensation bands salary pay grades and benefits
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.649 | acme-hr-comp-bands | acme | ALLOW | PASS |
| 1 | 0.366 | acme-hr-payroll | acme | ALLOW | PASS |
| 2 | 0.343 | acme-hr-benefits | acme | ALLOW | PASS |
| 3 | 0.289 | acme-hr-onboarding | acme | ALLOW | PASS |
| 4 | 0.273 | acme-hr-remote-work | acme | ALLOW | PASS |
| 5 | 0.268 | acme-hr-review-cycle | acme | ALLOW | PASS |
| 6 | 0.264 | acme-hr-hiring | acme | ALLOW | PASS |
| 7 | 0.261 | acme-hr-pto-policy | acme | ALLOW | PASS |
| 8 | 0.153 | acme-kb-mobile | acme | ALLOW | PASS |
| 9 | 0.114 | acme-kb-billing | acme | ALLOW | PASS |
PASS [NEG] eve@acme — paid time off vacation sick leave and parental leave policy
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.733 | acme-hr-pto-policy | acme | ALLOW | PASS |
| 1 | 0.176 | acme-eng-standards | acme | DENY | NEAR_MISS |
| 2 | 0.088 | globex-facilities-groundskeeping | globex | DENY | NEAR_MISS |
| 3 | 0.084 | acme-eng-oncall | acme | DENY | NEAR_MISS |
| 4 | 0.084 | globex-logistics-carrier-scorecards | globex | DENY | NEAR_MISS |
| 5 | 0.081 | acme-hr-remote-work | acme | ALLOW | PASS |
| 6 | 0.078 | acme-hr-hiring | acme | ALLOW | PASS |
| 7 | 0.078 | acme-eng-security-review | acme | DENY | NEAR_MISS |
| 8 | 0.075 | acme-kb-mobile | acme | ALLOW | PASS |
| 9 | 0.043 | acme-hr-onboarding | acme | ALLOW | PASS |
PASS [NEG] frank@acme — how to reset a password and resolve login errors
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.663 | acme-kb-login | acme | ALLOW | PASS |
| 1 | 0.139 | globex-operations-production-plan | globex | DENY | NEAR_MISS |
| 2 | 0.122 | acme-atlas-05 | acme | DENY | NEAR_MISS |
| 3 | 0.109 | globex-facilities-space-planning | globex | DENY | NEAR_MISS |
| 4 | 0.102 | acme-kb-sso | acme | ALLOW | PASS |
| 5 | 0.093 | acme-atlas-04 | acme | DENY | NEAR_MISS |
| 6 | 0.058 | acme-roadmap-sunset-plans | acme | ALLOW | PASS |
| 7 | 0.058 | acme-roadmap-q2-plans | acme | ALLOW | PASS |
| 8 | 0.056 | acme-roadmap-q3-plans | acme | ALLOW | PASS |
| 9 | 0.049 | acme-kb-api-errors | acme | ALLOW | PASS |
PASS [NEG] grace@acme — webhook setup registering endpoints and verifying signatures
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.686 | acme-kb-webhooks | acme | ALLOW | PASS |
| 1 | 0.119 | globex-facilities-groundskeeping | globex | DENY | NEAR_MISS |
| 2 | 0.118 | globex-facilities-janitorial | globex | DENY | NEAR_MISS |
| 3 | 0.051 | acme-kb-sso | acme | ALLOW | PASS |
| 4 | 0.0 | globex-sales-sow | globex | DENY | NEAR_MISS |
| 5 | 0.0 | globex-sales-renewal | globex | DENY | NEAR_MISS |
| 6 | 0.0 | globex-sales-quote-template | globex | DENY | NEAR_MISS |
| 7 | 0.0 | globex-sales-partner-agreement | globex | DENY | NEAR_MISS |
| 8 | 0.0 | globex-sales-nda | globex | DENY | NEAR_MISS |
| 9 | 0.0 | globex-sales-msa | globex | DENY | NEAR_MISS |
PASS [NEG] otto@globex — freight booking carrier selection and lane rates
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.698 | globex-logistics-freight-booking | globex | ALLOW | PASS |
| 1 | 0.343 | globex-logistics-carrier-scorecards | globex | ALLOW | PASS |
| 2 | 0.171 | globex-logistics-packaging | globex | ALLOW | PASS |
| 3 | 0.146 | globex-logistics-cold-chain | globex | ALLOW | PASS |
| 4 | 0.117 | globex-operations-supplier-quality | globex | DENY | NEAR_MISS |
| 5 | 0.108 | globex-operations-procurement | globex | DENY | NEAR_MISS |
| 6 | 0.102 | acme-kb-login | acme | DENY | NEAR_MISS |
| 7 | 0.062 | globex-logistics-routing | globex | ALLOW | PASS |
| 8 | 0.06 | globex-logistics-returns | globex | ALLOW | PASS |
| 9 | 0.058 | globex-facilities-meeting-rooms | globex | ALLOW | PASS |
PASS [NEG] judy@globex — annual production plan capacity and shift staffing
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.786 | globex-operations-production-plan | globex | ALLOW | PASS |
| 1 | 0.417 | globex-operations-shift-schedule | globex | ALLOW | PASS |
| 2 | 0.372 | globex-operations-capacity | globex | ALLOW | PASS |
| 3 | 0.229 | globex-operations-safety-ops | globex | ALLOW | PASS |
| 4 | 0.213 | globex-operations-output-report | globex | ALLOW | PASS |
| 5 | 0.175 | acme-roadmap-sunset-plans | acme | DENY | NEAR_MISS |
| 6 | 0.173 | acme-roadmap-q2-plans | acme | DENY | NEAR_MISS |
| 7 | 0.158 | acme-hr-hiring | acme | DENY | NEAR_MISS |
| 8 | 0.153 | acme-kb-login | acme | DENY | NEAR_MISS |
| 9 | 0.122 | acme-atlas-05 | acme | DENY | NEAR_MISS |
PASS [NEG] ivan@globex — badge and site access visitor sign-in procedures
| rank | score | doc | tenant | oracle | class |
|---|
| 0 | 0.581 | globex-facilities-badges | globex | ALLOW | PASS |
| 1 | 0.319 | globex-facilities-access-audit | globex | ALLOW | PASS |
| 2 | 0.153 | acme-kb-sso | acme | DENY | NEAR_MISS |
| 3 | 0.119 | acme-eng-deploy-process | acme | DENY | NEAR_MISS |
| 4 | 0.105 | acme-eng-security-review | acme | DENY | NEAR_MISS |
| 5 | 0.087 | acme-hr-comp-bands | acme | DENY | NEAR_MISS |
| 6 | 0.06 | globex-facilities-groundskeeping | globex | ALLOW | PASS |
| 7 | 0.059 | globex-facilities-signage | globex | ALLOW | PASS |
| 8 | 0.059 | globex-facilities-janitorial | globex | ALLOW | PASS |
| 9 | 0.058 | globex-facilities-meeting-rooms | globex | ALLOW | PASS |
Access-surface diff
The access surface grew: an embedding change (baseline(dim=2048) → broad(dim=128)) made 10 forbidden documents reachable — permissions unchanged.
Same corpus, same ACL snapshot; only the embedder differs.
Scope: probe-scope — compared 26 probe queries, not a corpus-wide scan. A clean result covers these queries only.
| identity | scenario | newly-reachable doc | oracle |
|---|
| bob@acme | [S1] | acme-kb-login | ALLOW |
| bob@acme | [S1] | acme-eng-deploy-process | DENY |
| bob@acme | [S1] | acme-eng-oncall | DENY |
| frank@acme | [S2] | acme-sales-msa | ALLOW |
| frank@acme | [S2] | globex-sales-msa | DENY |
| frank@acme | [S3] | globex-facilities-space-planning | DENY |
| alice@acme | [NEG] | acme-atlas-01 | ALLOW |
| eve@acme | [NEG] | acme-hr-onboarding | ALLOW |
| eve@acme | [NEG] | acme-hr-remote-work | ALLOW |
| eve@acme | [NEG] | acme-eng-standards | DENY |
| eve@acme | [NEG] | globex-facilities-energy | DENY |
| frank@acme | [NEG] | globex-facilities-space-planning | DENY |
| otto@globex | [NEG] | acme-kb-rate-limits | DENY |
| otto@globex | [NEG] | acme-kb-troubleshooting | DENY |
| otto@globex | [NEG] | globex-logistics-packaging | ALLOW |
| judy@globex | [NEG] | acme-hr-hiring | DENY |
| judy@globex | [NEG] | globex-operations-safety-ops | ALLOW |