Scope minimisation is a design constraint, not a policy

We record that an agent retrieved context, from which source, and how much. We do not record the content.

The detail

That is a design decision made early, and it constrains what we can build. Several requested features are simply out of reach without changing it, and we have declined to.

Fenwick Council’s approval turned on this being architectural rather than configurable.