Fields have explicit treatment
Every field is allowed, denied or placed behind owner approval. Missing fields default to no access.
Data-access manifests
The lab keeps task access in a versioned YAML manifest that people can read and tests can enforce.
Limits travel with policy
Read count, expiry, output destination and memory treatment belong to the policy rather than to a model prompt.
Versions make change visible
A receipt identifies the exact policy version. A newer decision cannot silently rewrite an older task history.