Governing agents without stopping the work

Every deployment in a regulated environment starts with the same question: what is the agent permitted to read?

The detail

Our answer is structural. Assembly records that context was retrieved and from where, never the content itself, and per-user identifiers can be stripped at collection.

Fenwick Council approved their programme unanimously on that basis. The constraint did not weaken the data — it meant the data could only be used for the purpose it was collected for.