Capability C1
Secure document sharing
Documents are shared by role, not by copying them. Each view, download, and change is recorded, so the question of who saw a document and when can be answered from the audit trail.
Reference builtReference implementation existsThe audit ledger and role-trimmed retrieval have reference implementations.
What happens
- A document is shared with a role on a case, not with a mailbox.
- Each read, download, and change is checked against the role and recorded.
- The audit trail can be searched by person, document, case, and time.
How the AI platform addresses it
- Access rules are evaluated at the time of each request, so a change of role takes effect at once.
- The audit ledger links each entry to the one before it with a hash, so an entry cannot be altered without the change showing.
- Search results and answers are filtered by the same rules, so a restricted document does not appear in a summary.
AI role
Retrieval for answers and summaries applies the access rules before any text reaches a model.
Approval
Access to a restricted document is granted by the case owner. The grant is recorded.
Systems involved
- Document management
- Identity (Microsoft Entra ID)
- Audit ledger
Reference components
- Claim audit ledger with Merkle proofs
- Claims document memory with role trimming