Walls access rules

What Walls decides, shown by running realistic scenarios through the engine. Each table and chart below is the engine's own output. Every expected decision, refusal and alert is asserted, so if the engine ever disagrees, this page fails to build.

Generated from ea1ed19 · scenarios in docs/scenarios · results as JSON in results/

Rules

RuleWhat holdsProven by
Walls winA walled person or group has no access to what the wall covers, whatever grants or memberships say.
Lateral hire from opposing counsel A client-wide screen that follows new matters Issued commands are refused; directory facts are recorded Research moved behind a wall A matter re-tagged out of a client screen A board restriction lifted behind a screen
Walls guardAn issued command that would give a walled person access is rejected: a direct grant, lifting a denial, or joining a group that has access.
A client-wide screen that follows new matters Issued commands are refused; directory facts are recorded Paranoid mode refuses group grants that reach a walled member A board restriction lifted behind a screen
Raising a wall revokesA wall revokes the walled principal's grants on what it covers in the same commit, kept history included. A wall over a group also revokes its members' own grants there.
Lateral hire from opposing counsel A precautionary wall is lifted
Lifting restores nothingWhen a wall is lifted, what it revoked returns only through a new grant.
A precautionary wall is lifted
Observed facts are recordedFacts reported by the directory or the DMS are recorded even when they break a rule; only an error in the facts themselves (an unknown or duplicate id, a cycle, a grant over the principal's own denial) rejects one. Walls still win over them, and the conflict raises an alert.
Issued commands are refused; directory facts are recorded A board restriction lifted behind a screen
Grants inherit down the treeA grant on a folder covers every folder and version below it.
A practice group inside the litigation team A privileged folder inside a matter
Groups nestA group can belong to a group; members get access through every level, and lose it when they leave.
A practice group inside the litigation team
Kept history is per versionAfter a keep-history revoke, a version stays readable only if it was created before the revoke.
Lateral hire from opposing counsel
Tag walls cover future rootsA root created, re-tagged or promoted to match a wall's tag selector is walled from that moment.
A client-wide screen that follows new matters A carve-out becomes its own matter
Group grants that reach a walled memberBy default the grant commits with an alert and the wall still wins; in paranoid mode it is rejected.
A client-wide screen that follows new matters Paranoid mode refuses group grants that reach a walled member
Denials cut a chainA denial ends a principal's inheritance at that folder, whatever its own deeper grants say. A grant that reopens access below a denial is an override: it needs acknowledgement and is flagged.
A privileged folder inside a matter A witness denied the privileged folder
Moving content behind a wall revokesA folder moved under a walled folder loses the walled person's grants; moving it back restores nothing.
Research moved behind a wall
Content leaving a wall needs acknowledgementMoving a folder or document out of a wall's coverage, or re-tagging a root out of a tag wall, is refused unless acknowledged, and an acknowledged move raises an alert. A new version of a deleted document filed outside the wall it last sat under counts as such a move.
Research moved behind a wall A deleted memo filed again outside its wall A carve-out becomes its own matter A matter re-tagged out of a client screen A misfiled memo moved out of a wall
Corrections never overwriteA retraction removes an event's effect from every date, while the log keeps what was believed at the time.
A grant to the wrong person, corrected
External content follows its folderDocuments kept outside Walls are decided by the folder the application says they sit in. Moving one out of a wall needs acknowledgement and raises an alert; a delete is undone by a restore, never a retraction.
A memo kept outside Walls leaves a wall A memo kept outside Walls is deleted, then restored
Disabled principals decide nothingA disabled person or service account has no access anywhere while disabled, whatever its grants and groups say. Enabling it restores what it had, and the past is unchanged.
A review integration is disabled
An agent sees the lower of twoAn agent acting for a person sees only what both it and the person may see, and nothing unless the person delegated to it.
An assistant acts for Ana
Revoked tokens are refusedA request carrying a revoked token is refused from the revocation on. Walls never interprets the token; the gate asks whether it is revoked.
A stolen laptop's token is revoked

Lateral hire from opposing counsel

Walls win Raising a wall revokes Kept history is per version

Ana, an associate on matter 42, rolls off and later joins opposing counsel. Ben's team keeps full access.

Lateral hire from opposing counsel: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Jun 1 matter42acme · 42 person ana: read of history before Mar 1 on matter42, until May 15ana→ May 15 group litigation: full on matter42litigation person ana: walled from matter42 by screenana memov1 v2 history only full walled ended Lateral hire from opposing counsel: peopleGroups with their members, nested groups within. People Jun 1 litigation ben ana
Lateral hire from opposing counselAna, an associate on matter 42, rolls off and later joins opposing counsel. Ben's team keeps full access. team granted Ana staffed rolls off memo v2 screened ana v1 ana v1: no access from Jan 2 to Jan 10. no grant reaches it ana v1: edit from Jan 10 to Mar 1. via person ana on matter42 ana v1: read · pre-Mar 1 from Mar 1 to May 15. via person ana on matter42 ana v1: walled · screen from May 15 onward. walled by screen ana v2 ana v2: no access from Apr 1 to May 15. created after the kept-history cutoff ana v2: walled · screen from May 15 onward. walled by screen ben ben: full from Jan 2 onward. via group litigation on matter42 litigation litigation: full from Jan 2 onward. granted on matter42 Jan Feb Mar Apr May Jun history only edit full walled no access checked

✓ 5 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-02 Acme v. Globex is opened as matter 42 root_created
  2. 2026-01-02 First strategy memo is filed version_created
  3. 2026-01-02 Ben is on the litigation team joined_group
  4. 2026-01-02 The litigation team gets full access to the matter granted
  5. 2026-01-10 Associate Ana is staffed on the matter granted
  6. 2026-03-01 Ana rolls off and keeps read access to what existed revoked_keep_history
  7. 2026-04-01 The memo is revised version_created
  8. 2026-05-15 Ana accepts an offer from opposing counsel and is screened wall_raised → engine revokes person ana on matter42

Asserted checks

DatePersonVersionEngine says
2026-02-01anamemo_v1✓ edit
2026-04-15anamemo_v1✓ read
2026-04-15anamemo_v2✓ deny
2026-06-01anamemo_v1✓ deny
2026-06-01benmemo_v2✓ full
Access by person and group

2026-02-01

Personmemo_v1memo_v2
anaeditnot filed
benfullnot filed
Group (own grants)memo_v1memo_v2
litigationmembers: benfullnot filed

2026-04-15

Personmemo_v1memo_v2
anaread · pre-Mar 1no access
benfullfull
Group (own grants)memo_v1memo_v2
litigationmembers: benfullfull

2026-06-01

Personmemo_v1memo_v2
anawalled · screenwalled · screen
benfullfull
Group (own grants)memo_v1memo_v2
litigationmembers: benfullfull

A practice group inside the litigation team

Grants inherit down the tree Groups nest

Securities sits inside litigation, which has edit on matter 7. Carol reaches a brief two folders down until leaving securities.

A practice group inside the litigation team: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter7initech group litigation: edit on matter7litigation pleadings complaint drafts brief edit A practice group inside the litigation team: peopleGroups with their members, nested groups within. People Mar 15 litigation dave securities carol→ Mar 1 ended
A practice group inside the litigation teamSecurities sits inside litigation, which has edit on matter 7. Carol reaches a brief two folders down until leaving securities. groups nest team granted Carol leaves carol carol: no access from Jan 5 to Jan 6. no grant reaches it carol: edit from Jan 6 to Mar 1. via group litigation on matter7 carol: no access from Mar 1 onward. no grant reaches it dave dave: no access from Jan 5 to Jan 6. no grant reaches it dave: edit from Jan 6 onward. via group litigation on matter7 litigation litigation: no access from Jan 5 to Jan 6. no grant of its own litigation: edit from Jan 6 onward. granted on matter7 securities securities: no access from Jan 5 onward. no grant of its own Jan Feb Mar edit no access checked

✓ 4 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Initech's matter 7 is opened root_created
  2. 2026-01-05 A pleadings folder is added folder_created
  3. 2026-01-05 A drafts folder is added under pleadings folder_created
  4. 2026-01-05 The complaint is filed version_created
  5. 2026-01-05 A draft brief is started version_created
  6. 2026-01-05 Securities becomes part of litigation joined_group
  7. 2026-01-05 Carol joins the securities practice group joined_group
  8. 2026-01-05 Dave joins litigation directly joined_group
  9. 2026-01-06 Litigation is granted edit on the whole matter granted
  10. 2026-03-01 Carol leaves the securities group left_group

Asserted checks

DatePersonVersionEngine says
2026-02-01carolbrief_v1✓ edit
2026-02-01davecomplaint_v1✓ edit
2026-03-15carolbrief_v1✓ deny
2026-03-15davebrief_v1✓ edit
Access by person and group

2026-02-01

Personcomplaint_v1brief_v1
caroleditedit
daveeditedit
Group (own grants)complaint_v1brief_v1
litigationmembers: carol, daveeditedit
securitiesmembers: carolno accessno access

2026-03-15

Personcomplaint_v1brief_v1
carolno accessno access
daveeditedit
Group (own grants)complaint_v1brief_v1
litigationmembers: daveeditedit
securitiesmembers: noneno accessno access

A client-wide screen that follows new matters

Tag walls cover future roots Walls guard Group grants that reach a walled member Walls win

Erin is screened from every Globex matter, including one opened later and an Initech matter re-tagged after an acquisition.

A client-wide screen that follows new matters: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter55globex group all-staff: read on matter55all-staff person erin: walled from matter55 by globex-screenerin deck matter90globex group all-staff: read on matter90all-staff person erin: walled from matter90 by globex-screenerin filing read walled A client-wide screen that follows new matters: peopleGroups with their members, nested groups within. People Mar 15 all-staff erin frank
A client-wide screen that follows new mattersErin is screened from every Globex matter, including one opened later and an Initech matter re-tagged after an acquisition. screened new Globex matter grant refused re-tagged Globex erin deck erin deck: read from Jan 5 to Mar 1. via group all-staff on matter55 erin deck: walled · globex-screen from Mar 1 onward. walled by globex-screen erin filing erin filing: walled · globex-screen from Feb 1 onward. walled by globex-screen frank frank: read from Jan 5 onward. via group all-staff on matter55 all-staff all-staff: read from Jan 5 onward. granted on matter55 Jan Feb Mar read walled checked

✓ 5 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Erin is screened from all Globex matters wall_raised
  2. 2026-01-05 Erin is on all-staff joined_group
  3. 2026-01-05 Frank joins all-staff joined_group
  4. 2026-01-05 An Initech matter is opened root_created
  5. 2026-01-05 A pitch deck is filed on it version_created
  6. 2026-01-05 All-staff may read the Initech matter granted
  7. 2026-02-01 A new Globex matter is opened: walled from birth root_created
  8. 2026-02-01 A filing is added version_created
  9. 2026-02-01 All-staff may read it: commits, with an alert about Erin granted → alert: group_grant_reaches_walled
  10. 2026-02-02 Someone tries to grant Erin read directly granted refused person erin is walled from matter90 by wall globex-screen
  11. 2026-03-01 Globex acquires Initech; matter 55 is re-tagged tags_changed

Asserted checks

DatePersonVersionEngine says
2026-02-15frankfiling_v1✓ read
2026-02-15erinfiling_v1✓ deny
2026-02-15erindeck_v1✓ read
2026-03-15erindeck_v1✓ deny
2026-03-15frankdeck_v1✓ read
Access by person and group

2026-02-15

Persondeck_v1filing_v1
erinreadwalled · globex-screen
frankreadread
Group (own grants)deck_v1filing_v1
all-staffmembers: erin, frankreadread

2026-03-15

Persondeck_v1filing_v1
erinwalled · globex-screenwalled · globex-screen
frankreadread
Group (own grants)deck_v1filing_v1
all-staffmembers: erin, frankreadread

Issued commands are refused; directory facts are recorded

Walls guard Observed facts are recorded Walls win

Gina is screened from matter 42. Staff cannot give Gina access; the directory can report it, but the wall still wins.

Issued commands are refused; directory facts are recorded: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Jan 15 matter42 group team42: edit on matter42team42 person gina: walled from matter42 by gina-screengina memo edit walled Issued commands are refused; directory facts are recorded: peopleGroups with their members, nested groups within. People Jan 15 team42 gina hugo
Issued commands are refused; directory facts are recordedGina is screened from matter 42. Staff cannot give Gina access; the directory can report it, but the wall still wins. screened grant refused join refused directory join gina gina: no access from Jan 5 to Jan 6. no grant reaches it gina: walled · gina-screen from Jan 6 onward. walled by gina-screen hugo hugo: edit from Jan 5 onward. via group team42 on matter42 team42 team42: edit from Jan 5 onward. granted on matter42 Jan 5 6 10 12 edit walled no access checked

✓ 2 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A memo is filed version_created
  3. 2026-01-05 Hugo is on the matter team joined_group
  4. 2026-01-05 The matter team gets edit granted
  5. 2026-01-06 Gina is screened wall_raised
  6. 2026-01-10 A direct grant to Gina is refused granted refused person gina is walled from matter42 by wall gina-screen
  7. 2026-01-10 Adding Gina to the team is refused joined_group refused person gina is walled from matter42 by wall gina-screen
  8. 2026-01-12 The directory reports that Gina joined the team joined_group → alert: observed_wall_conflict

Asserted checks

DatePersonVersionEngine says
2026-01-15ginamemo_v1✓ deny
2026-01-15hugomemo_v1✓ edit
Access by person and group

2026-01-15

Personmemo_v1
ginawalled · gina-screen
hugoedit
Group (own grants)memo_v1
team42members: gina, hugoedit

Paranoid mode refuses group grants that reach a walled member

Group grants that reach a walled member Walls guard paranoid mode

In paranoid mode, a team grant that would reach screened Iris is refused, so Jon is granted directly.

Paranoid mode refuses group grants that reach a walled member: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Jan 15 matter42 person jon: edit on matter42jon person iris: walled from matter42 by iris-screeniris memo edit walled Paranoid mode refuses group grants that reach a walled member: peopleGroups with their members, nested groups within. People Jan 15 litigation iris jon
Paranoid mode refuses group grants that reach a walled memberIn paranoid mode, a team grant that would reach screened Iris is refused, so Jon is granted directly. Iris screened team refused Jon granted iris iris: walled · iris-screen from Jan 5 onward. walled by iris-screen jon jon: no access from Jan 5 to Jan 10. no grant reaches it jon: edit from Jan 10 onward. via person jon on matter42 litigation litigation: no access from Jan 5 onward. no grant of its own Jan 5 10 edit walled no access checked

✓ 2 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A memo is filed version_created
  3. 2026-01-05 Iris joins litigation joined_group
  4. 2026-01-05 Jon joins litigation joined_group
  5. 2026-01-05 Iris is screened wall_raised
  6. 2026-01-10 Granting litigation edit is refused: it would reach Iris granted refused person iris is walled from matter42 by wall iris-screen
  7. 2026-01-10 Jon is granted edit directly instead granted

Asserted checks

DatePersonVersionEngine says
2026-01-15jonmemo_v1✓ edit
2026-01-15irismemo_v1✓ deny
Access by person and group

2026-01-15

Personmemo_v1
iriswalled · iris-screen
jonedit
Group (own grants)memo_v1
litigationmembers: iris, jonno access

A precautionary wall is lifted

Raising a wall revokes Lifting restores nothing

Kai is screened while a conflict check runs. Lifting the wall brings nothing back until a new grant.

A precautionary wall is lifted: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Apr 15 matter12 person kai: read on matter12kai person kai: walled from matter12 by pending-check, until Mar 1kai→ Mar 1 contract read walled ended A precautionary wall is lifted: peopleGroups with their members, nested groups within. People Apr 15 kai
A precautionary wall is liftedKai is screened while a conflict check runs. Lifting the wall brings nothing back until a new grant. granted screened lifted regranted kai kai: edit from Jan 5 to Feb 1. via person kai on matter12 kai: walled · pending-check from Feb 1 to Mar 1. walled by pending-check kai: no access from Mar 1 to Apr 1. no grant reaches it kai: read from Apr 1 onward. via person kai on matter12 Jan Feb Mar Apr read edit walled no access checked

✓ 4 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 12 is opened root_created
  2. 2026-01-05 A contract draft is filed version_created
  3. 2026-01-05 Kai is granted edit granted
  4. 2026-02-01 Kai is screened pending a conflict check wall_raised → engine revokes person kai on matter12
  5. 2026-03-01 The check clears and the wall is lifted wall_lifted
  6. 2026-04-01 Kai is granted read again granted

Asserted checks

DatePersonVersionEngine says
2026-01-15kaicontract_v1✓ edit
2026-02-15kaicontract_v1✓ deny
2026-03-15kaicontract_v1✓ deny
2026-04-15kaicontract_v1✓ read
Access by person and group

2026-01-15

Personcontract_v1
kaiedit

2026-02-15

Personcontract_v1
kaiwalled · pending-check

2026-03-15

Personcontract_v1
kaino access

2026-04-15

Personcontract_v1
kairead

A privileged folder inside a matter

Denials cut a chain Grants inherit down the tree

Litigation has edit on matter 42 but is denied its privileged folder. Partners read it through an acknowledged override.

A privileged folder inside a matter: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Jan 15 matter42 group litigation: edit on matter42litigation pleading privileged group litigation: denied on privilegedlitigation group partners: read on privileged (override)partners advice read edit denied override A privileged folder inside a matter: peopleGroups with their members, nested groups within. People Jan 15 litigation leo mia partners leo
A privileged folder inside a matterLitigation has edit on matter 42 but is denied its privileged folder. Partners read it through an acknowledged override. team granted privileged denied refused override leo pleading leo pleading: no access from Jan 5 to Jan 6. no grant reaches it leo pleading: edit from Jan 6 onward. via group litigation on matter42 leo advice leo advice: no access from Jan 5 to Jan 7. no grant reaches it leo advice: read from Jan 7 onward. via group partners on privileged mia pleading mia pleading: no access from Jan 5 to Jan 6. no grant reaches it mia pleading: edit from Jan 6 onward. via group litigation on matter42 mia advice mia advice: no access from Jan 5 onward. no grant reaches it litigation pleading litigation pleading: no access from Jan 5 to Jan 6. no grant of its own litigation pleading: edit from Jan 6 onward. granted on matter42 litigation advice litigation advice: no access from Jan 5 onward. no grant of its own partners pleading partners pleading: no access from Jan 5 onward. no grant of its own partners advice partners advice: no access from Jan 5 to Jan 7. no grant of its own partners advice: read from Jan 7 onward. granted on privileged Jan 5 6 7 read edit no access checked

✓ 4 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A privileged folder is added folder_created
  3. 2026-01-05 A pleading is filed at the root version_created
  4. 2026-01-05 Privileged advice is filed version_created
  5. 2026-01-05 Leo joins litigation joined_group
  6. 2026-01-05 Leo is a partner joined_group
  7. 2026-01-05 Mia joins litigation joined_group
  8. 2026-01-06 Litigation gets edit on the matter granted
  9. 2026-01-06 Litigation is denied the privileged folder denied
  10. 2026-01-07 Partners' read on privileged, unacknowledged, is refused granted refused this reopens privileged for leo, who has a denial there; resubmit with acknowledge_override
  11. 2026-01-07 The same grant, acknowledged as an override granted

Asserted checks

DatePersonVersionEngine says
2026-01-15miapleading_v1✓ edit
2026-01-15miaadvice_v1✓ deny
2026-01-15leoadvice_v1✓ read
2026-01-15leopleading_v1✓ edit
Access by person and group

2026-01-15

Personpleading_v1advice_v1
leoeditread
miaeditno access
Group (own grants)pleading_v1advice_v1
litigationmembers: leo, miaeditno access
partnersmembers: leono accessread

Research moved behind a wall

Moving content behind a wall revokes Walls win Content leaving a wall needs acknowledgement

Noah, screened from matter 42, has edit on research in matter 77 until the folder moves into 42.

Research moved behind a wall: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter42 person noah: walled from matter42 by noah-screennoah matter77 research person noah: edit on research (override), until Feb 1noah→ Feb 1 notes edit walled override ended Research moved behind a wall: peopleGroups with their members, nested groups within. People Mar 15 noah
Research moved behind a wallNoah, screened from matter 42, has edit on research in matter 77 until the folder moves into 42. granted screened moved in moved back noah noah: edit from Jan 5 to Feb 1. via person noah on research noah: walled · noah-screen from Feb 1 to Mar 1. walled by noah-screen noah: no access from Mar 1 onward. no grant reaches it Jan Feb Mar edit walled no access checked

✓ 3 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 Matter 77 is opened root_created
  3. 2026-01-05 A research folder is added to matter 77 folder_created
  4. 2026-01-05 Research notes are filed version_created
  5. 2026-01-05 Noah gets edit on the research folder granted
  6. 2026-01-05 Noah is screened from matter 42 wall_raised
  7. 2026-02-01 The research folder is moved into matter 42 folder_moved → engine revokes person noah on research
  8. 2026-03-01 It is moved back, acknowledged folder_moved → alert: left_walled_scope

Asserted checks

DatePersonVersionEngine says
2026-01-15noahnotes_v1✓ edit
2026-02-15noahnotes_v1✓ deny
2026-03-15noahnotes_v1✓ deny
Access by person and group

2026-01-15

Personnotes_v1
noahedit

2026-02-15

Personnotes_v1
noahwalled · noah-screen

2026-03-15

Personnotes_v1
noahno access

A grant to the wrong person, corrected

Corrections never overwrite

Edit meant for Owen went to Olga. The retraction erases Olga's access on every date; the log keeps what was believed.

A grant to the wrong person, corrected: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Jan 25 matter30 person owen: edit on matter30owen terms edit A grant to the wrong person, corrected: peopleGroups with their members, nested groups within. People Jan 25 olga owen
A grant to the wrong person, correctedEdit meant for Owen went to Olga. The retraction erases Olga's access on every date; the log keeps what was believed. wrong grant retracted Owen granted olga olga: no access from Jan 5 onward. no grant reaches it olga: believed edit at the time; since corrected owen owen: no access from Jan 5 to Jan 20. no grant reaches it owen: edit from Jan 20 onward. via person owen on matter30 Jan 5 10 20 edit no access believed then checked

✓ 3 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 30 is opened root_created
  2. 2026-01-05 A term sheet is filed version_created
  3. 2026-01-10 Edit is granted to Olga by mistake granted
  4. 2026-01-20 The mistaken grant (step 3) is retracted retracted
  5. 2026-01-20 Owen is granted edit granted

Asserted checks

DatePersonVersionEngine says
2026-01-15olgaterms_v1✓ deny
2026-01-15 as recorded on 2026-01-15olgaterms_v1✓ edit
2026-01-25owenterms_v1✓ edit
Access by person and group

2026-01-15

Personterms_v1
olgano access
owenno access

2026-01-25

Personterms_v1
olgano access
owenedit

A memo kept outside Walls leaves a wall

External content follows its folder

The application keeps its memo in matter 42, which Noah is screened from; he has edit on matter 77. Walls hears only where the memo moves.

A memo kept outside Walls leaves a wall: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Feb 15 matter42 person noah: walled from matter42 by noah-screennoah matter77 person noah: edit on matter77noah memo edit walled A memo kept outside Walls leaves a wall: peopleGroups with their members, nested groups within. People Feb 15 noah
A memo kept outside Walls leaves a wallThe application keeps its memo in matter 42, which Noah is screened from; he has edit on matter 77. Walls hears only where the memo moves. granted screened refused moved out noah noah: walled · noah-screen from Jan 5 to Feb 1. walled by noah-screen noah: edit from Feb 1 onward. via person noah on matter77 Jan 5 Feb 1 edit walled checked

✓ 2 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 Matter 77 is opened root_created
  3. 2026-01-05 Noah gets edit on matter 77 granted
  4. 2026-01-05 Noah is screened from matter 42 wall_raised
  5. 2026-02-01 The memo is moved to matter 77 without acknowledgement content_relocated refused memo would leave wall noah-screen; resubmit with acknowledge_override
  6. 2026-02-01 It is moved again, acknowledged content_relocated → alert: left_walled_scope

Asserted checks

DatePersonVersionEngine says
2026-01-15noahmemo_v1✓ deny
2026-02-15noahmemo_v1✓ edit
Access by person and group

2026-01-15

Personmemo_v1
noahwalled · noah-screen

2026-02-15

Personmemo_v1
noahedit

A memo kept outside Walls is deleted, then restored

External content follows its folder

Ana has edit on matter 42, where the application keeps a memo. It is deleted, and a restore, not a retraction, brings it back.

A memo kept outside Walls is deleted, then restored: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter42 person ana: edit on matter42ana memo edit A memo kept outside Walls is deleted, then restored: peopleGroups with their members, nested groups within. People Mar 15 ana
A memo kept outside Walls is deleted, then restoredAna has edit on matter 42, where the application keeps a memo. It is deleted, and a restore, not a retraction, brings it back. granted deleted retraction refused restored ana ana: edit from Jan 5 to Feb 1. via person ana on matter42 ana: edit from Mar 1 onward. via person ana on matter42 Jan Feb Mar edit checked

✓ 3 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 Ana gets edit on matter 42 granted
  3. 2026-02-01 The memo is deleted content_deleted
  4. 2026-02-10 Retracting the delete is refused retracted refused event 2 cannot be retracted: it changed no rows
  5. 2026-03-01 The memo is restored to matter 42 content_restored

Asserted checks

DatePersonVersionEngine says
2026-01-15anamemo_v1✓ edit
2026-02-15anamemo_v1✓ deny
2026-03-15anamemo_v1✓ edit
Access by person and group

2026-01-15

Personmemo_v1
anaedit

2026-02-15

Personmemo_v1
ananot filed

2026-03-15

Personmemo_v1
anaedit

A deleted memo filed again outside its wall

Content leaving a wall needs acknowledgement

Noah, screened from matter 42, has edit on matter 77. A memo in matter 42 is deleted, then a new version of it is filed in matter 77.

A deleted memo filed again outside its wall: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter42 person noah: walled from matter42 by noah-screennoah matter77 person noah: edit on matter77noah memov1 v2 edit walled A deleted memo filed again outside its wall: peopleGroups with their members, nested groups within. People Mar 15 noah
A deleted memo filed again outside its wallNoah, screened from matter 42, has edit on matter 77. A memo in matter 42 is deleted, then a new version of it is filed in matter 77. granted screened deleted refused filed out noah noah: walled · noah-screen from Jan 5 to Feb 1. walled by noah-screen noah: edit from Mar 1 onward. via person noah on matter77 Jan Feb Mar edit walled checked

✓ 4 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 Matter 77 is opened root_created
  3. 2026-01-05 A memo is filed in matter 42 version_created
  4. 2026-01-05 Noah gets edit on matter 77 granted
  5. 2026-01-05 Noah is screened from matter 42 wall_raised
  6. 2026-02-01 The memo is deleted document_deleted
  7. 2026-03-01 A new version is filed in matter 77 without acknowledgement version_created refused memo would leave wall noah-screen; resubmit with acknowledge_override
  8. 2026-03-01 It is filed again, acknowledged version_created → alert: left_walled_scope

Asserted checks

DatePersonVersionEngine says
2026-01-15noahmemo_v1✓ deny
2026-02-15noahmemo_v1✓ deny
2026-03-15noahmemo_v1✓ edit
2026-03-15noahmemo_v2✓ edit
Access by person and group

2026-01-15

Personmemo_v1memo_v2
noahwalled · noah-screennot filed

2026-02-15

Personmemo_v1memo_v2
noahnot filednot filed

2026-03-15

Personmemo_v1memo_v2
noaheditedit

A review integration is disabled

Disabled principals decide nothing

A document-review service account reads matter 42 on its own grant and edits matter 77 through its group. Disabling it stops every decision it makes at once, and enabling it restores them.

A review integration is disabled: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter42acme person review-bot: read on matter42review-bot pleadings brief matter77globex group reviewers: edit on matter77reviewers memo read edit A review integration is disabled: peopleGroups with their members, nested groups within. People Mar 15 reviewers review-bot
A review integration is disabledA document-review service account reads matter 42 on its own grant and edits matter 77 through its group. Disabling it stops every decision it makes at once, and enabling it restores them. granted disabled enabled review-bot brief review-bot brief: read from Jan 5 to Feb 10. via person review-bot on matter42 review-bot brief: no access from Feb 10 to Mar 10. disabled review-bot brief: read from Mar 10 onward. via person review-bot on matter42 review-bot memo review-bot memo: edit from Jan 5 to Feb 10. via group reviewers on matter77 review-bot memo: no access from Feb 10 to Mar 10. disabled review-bot memo: edit from Mar 10 onward. via group reviewers on matter77 reviewers brief reviewers brief: no access from Jan 5 onward. no grant of its own reviewers memo reviewers memo: edit from Jan 5 onward. granted on matter77 Jan Feb Mar read edit no access checked

✓ 7 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A pleadings folder is added folder_created
  3. 2026-01-05 Matter 77 is opened root_created
  4. 2026-01-05 A brief is filed in pleadings version_created
  5. 2026-01-05 A memo is filed in matter 77 version_created
  6. 2026-01-05 The review integration is registered as a service account principal_registered
  7. 2026-01-05 It joins the reviewers group joined_group
  8. 2026-01-05 It is granted read on matter 42 granted
  9. 2026-01-05 Reviewers are granted edit on matter 77 granted
  10. 2026-02-10 Its key is suspected leaked, so the account is disabled principal_disabled
  11. 2026-03-10 The key is rotated and the account enabled again principal_enabled

Asserted checks

DatePersonVersionEngine says
2026-02-01review-botbrief_v1✓ read
2026-02-01review-botmemo_v1✓ edit
2026-02-15review-botbrief_v1✓ deny
2026-02-15review-botmemo_v1✓ deny
2026-02-15 as recorded on 2026-02-09review-botmemo_v1✓ edit
2026-03-15review-botbrief_v1✓ read
2026-03-15review-botmemo_v1✓ edit
Access by person and group

2026-02-01

Personbrief_v1memo_v1
review-botreadedit
Group (own grants)brief_v1memo_v1
reviewersmembers: review-botno accessedit

2026-02-15

Personbrief_v1memo_v1
review-botno accessno access
Group (own grants)brief_v1memo_v1
reviewersmembers: review-botno accessedit

2026-03-15

Personbrief_v1memo_v1
review-botreadedit
Group (own grants)brief_v1memo_v1
reviewersmembers: review-botno accessedit

An assistant acts for Ana

An agent sees the lower of two

An AI assistant with grants of its own acts for Ana. It sees only what both it and Ana may see, and nothing once she ends the delegation.

An assistant acts for Ana: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 boardfirm person assistant: full on boardassistant minutes matter42acme person ana: edit on matter42ana person assistant: read on matter42assistant brief matter77globex person ana: read on matter77ana person assistant: full on matter77assistant memo read edit full An assistant acts for Ana: peopleGroups with their members, nested groups within. People Mar 15 ana assistant
An assistant acts for AnaAn AI assistant with grants of its own acts for Ana. It sees only what both it and Ana may see, and nothing once she ends the delegation. delegated ended ana brief ana brief: edit from Jan 5 onward. via person ana on matter42 ana memo ana memo: read from Jan 5 onward. via person ana on matter77 ana minutes ana minutes: no access from Jan 5 onward. no grant reaches it assistant brief assistant brief: read from Jan 5 onward. via person assistant on matter42 assistant memo+minutes assistant memo+minutes: full from Jan 5 onward. via person assistant on matter77 Jan Feb Mar read edit full no access checked

✓ 7 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 Matter 77 is opened root_created
  3. 2026-01-05 The board matter is opened root_created
  4. 2026-01-05 A brief is filed in matter 42 version_created
  5. 2026-01-05 A memo is filed in matter 77 version_created
  6. 2026-01-05 Board minutes are filed version_created
  7. 2026-01-05 Ana is granted edit on matter 42 granted
  8. 2026-01-05 Ana is granted read on matter 77 granted
  9. 2026-01-05 The assistant is registered as a service account principal_registered
  10. 2026-01-05 The assistant is granted read on matter 42 granted
  11. 2026-01-05 The assistant is granted full on matter 77 granted
  12. 2026-01-05 The assistant is granted full on the board matter granted
  13. 2026-02-01 Ana lets the assistant act for her delegation_started
  14. 2026-03-01 Ana ends the delegation delegation_ended

Asserted checks

DatePersonVersionEngine says
2026-01-15assistant acting for anabrief_v1✓ deny
2026-02-15assistant acting for anabrief_v1✓ read
2026-02-15assistant acting for anamemo_v1✓ read
2026-02-15assistant acting for anaminutes_v1✓ deny
2026-02-15anabrief_v1✓ edit
2026-02-15assistantminutes_v1✓ full
2026-03-15assistant acting for anamemo_v1✓ deny
Access by person and group

2026-01-15

Personbrief_v1memo_v1minutes_v1
anaeditreadno access
assistantreadfullfull

2026-02-15

Personbrief_v1memo_v1minutes_v1
anaeditreadno access
assistantreadfullfull

2026-03-15

Personbrief_v1memo_v1minutes_v1
anaeditreadno access
assistantreadfullfull

A stolen laptop's token is revoked

Revoked tokens are refused

Ana reports her laptop stolen. Its token is revoked: from then on, a request carrying it is refused, while Ana's own access, on another token, is unchanged.

A stolen laptop's token is revoked: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Feb 15 matter42acme person ana: edit on matter42ana memo edit A stolen laptop's token is revoked: peopleGroups with their members, nested groups within. People Feb 15 ana
A stolen laptop's token is revokedAna reports her laptop stolen. Its token is revoked: from then on, a request carrying it is refused, while Ana's own access, on another token, is unchanged. granted revoked ana ana: edit from Jan 5 onward. via person ana on matter42 Jan 5 Feb 10 edit

✓ 3 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A memo is filed version_created
  3. 2026-01-05 Ana is granted edit granted
  4. 2026-02-10 The laptop's token is revoked token_revoked

Asserted checks

DatePersonVersionEngine says
2026-02-01ana with token ana-laptopmemo_v1✓ edit
2026-02-15ana with token ana-laptopmemo_v1✓ deny token revoked by event 3 from 2026-02-10
2026-02-15ana with token ana-phonememo_v1✓ edit
Access by person and group

2026-02-01

Personmemo_v1
anaedit

2026-02-15

Personmemo_v1
anaedit

A carve-out becomes its own matter

Tag walls cover future roots Content leaving a wall needs acknowledgement

Pia is screened from every Globex matter. Initech's widgets work, where she has edit, becomes a Globex matter of its own; a Globex workstream can only leave her wall with acknowledgement.

A carve-out becomes its own matter: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 1 antitrustinitech matter77initech matter90globex person pia: walled from matter90 by globex-screenpia widgetsglobex person pia: edit on widgets (override), until Feb 1pia→ Feb 1 person pia: walled from widgets by globex-screenpia plan edit walled override ended A carve-out becomes its own matter: peopleGroups with their members, nested groups within. People Mar 1 pia
A carve-out becomes its own matterPia is screened from every Globex matter. Initech's widgets work, where she has edit, becomes a Globex matter of its own; a Globex workstream can only leave her wall with acknowledgement. screened granted promoted into Globex refused promoted out pia pia: edit from Jan 5 to Feb 1. via person pia on widgets pia: walled · globex-screen from Feb 1 onward. walled by globex-screen Jan Feb Mar edit walled checked

✓ 2 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Pia is screened from all Globex matters wall_raised
  2. 2026-01-05 Initech's matter 77 is opened root_created
  3. 2026-01-05 A widgets folder is added to it folder_created
  4. 2026-01-05 A sale plan is filed in widgets version_created
  5. 2026-01-05 Pia gets edit on widgets granted
  6. 2026-01-05 Globex's matter 90 is opened root_created
  7. 2026-01-05 An antitrust folder is added to it folder_created
  8. 2026-02-01 Globex buys the widgets business: the folder becomes its own Globex matter folder_moved → engine revokes person pia on widgets
  9. 2026-03-01 Antitrust is made an Initech matter, without acknowledgement folder_moved refused antitrust would leave wall globex-screen; resubmit with acknowledge_override
  10. 2026-03-01 It is promoted again, acknowledged folder_moved → alert: left_walled_scope

Asserted checks

DatePersonVersionEngine says
2026-01-15piaplan_v1✓ edit
2026-02-15piaplan_v1✓ deny
Access by person and group

2026-01-15

Personplan_v1
piaedit

2026-02-15

Personplan_v1
piawalled · globex-screen

A matter re-tagged out of a client screen

Content leaving a wall needs acknowledgement Walls win

Quinn is screened from every Globex matter, though all-staff may read matter 55. When Globex sells the business to Initech, re-tagging the matter frees it only with acknowledgement.

A matter re-tagged out of a client screen: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter55initech group all-staff: read on matter55all-staff contract read A matter re-tagged out of a client screen: peopleGroups with their members, nested groups within. People Mar 15 all-staff quinn rae
A matter re-tagged out of a client screenQuinn is screened from every Globex matter, though all-staff may read matter 55. When Globex sells the business to Initech, re-tagging the matter frees it only with acknowledgement. all-staff granted screened refused re-tagged Initech quinn quinn: read from Jan 5 to Jan 6. via group all-staff on matter55 quinn: walled · globex-screen from Jan 6 to Mar 1. walled by globex-screen quinn: read from Mar 1 onward. via group all-staff on matter55 rae rae: read from Jan 5 onward. via group all-staff on matter55 all-staff all-staff: read from Jan 5 onward. granted on matter55 Jan Feb Mar read walled checked

✓ 3 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Globex's matter 55 is opened root_created
  2. 2026-01-05 A supply contract is filed version_created
  3. 2026-01-05 Quinn is on all-staff joined_group
  4. 2026-01-05 Rae is on all-staff joined_group
  5. 2026-01-05 All-staff may read matter 55 granted
  6. 2026-01-06 Quinn is screened from all Globex matters wall_raised
  7. 2026-03-01 Globex sells the business; re-tagging matter 55 as Initech, unacknowledged, is refused tags_changed refused matter55 would leave wall globex-screen; resubmit with acknowledge_override
  8. 2026-03-01 It is re-tagged again, acknowledged tags_changed → alert: left_walled_scope

Asserted checks

DatePersonVersionEngine says
2026-02-01raecontract_v1✓ read
2026-02-01quinncontract_v1✓ deny
2026-03-15quinncontract_v1✓ read
Access by person and group

2026-02-01

Personcontract_v1
quinnwalled · globex-screen
raeread
Group (own grants)contract_v1
all-staffmembers: quinn, raeread

2026-03-15

Personcontract_v1
quinnread
raeread
Group (own grants)contract_v1
all-staffmembers: quinn, raeread

A board restriction lifted behind a screen

Walls guard Observed facts are recorded Walls win

Rosa has edit on matter 42 but is denied its board folder, which she is later screened from as well. Lifting her denial cannot let her back in.

A board restriction lifted behind a screen: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Mar 15 matter42 person rosa: edit on matter42rosa person sam: edit on matter42sam pleading board person rosa: denied on board, until Mar 1rosa→ Mar 1 person rosa: walled from board by rosa-board-screenrosa minutes edit walled denied override ended A board restriction lifted behind a screen: peopleGroups with their members, nested groups within. People Mar 15 rosa sam
A board restriction lifted behind a screenRosa has edit on matter 42 but is denied its board folder, which she is later screened from as well. Lifting her denial cannot let her back in. Rosa granted board denied screened lift refused DMS lift rosa pleading rosa pleading: edit from Jan 5 onward. via person rosa on matter42 rosa minutes rosa minutes: no access from Jan 5 to Feb 1. denied, via person rosa on matter42 › board rosa minutes: walled · rosa-board-screen from Feb 1 onward. walled by rosa-board-screen sam sam: edit from Jan 5 onward. via person sam on matter42 Jan Feb Mar edit walled no access checked

✓ 5 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A board folder is added folder_created
  3. 2026-01-05 A pleading is filed at the root version_created
  4. 2026-01-05 Board minutes are filed version_created
  5. 2026-01-05 Rosa gets edit on the matter granted
  6. 2026-01-05 Sam gets edit on the matter granted
  7. 2026-01-05 Rosa's brother sits on the client's board: she is denied the board folder denied
  8. 2026-02-01 Her brother turns out to be a witness: Rosa is screened from the board folder wall_raised
  9. 2026-03-01 Lifting Rosa's board denial is refused denial_lifted refused person rosa is walled from board by wall rosa-board-screen
  10. 2026-03-01 The DMS reports that her board denial was lifted denial_lifted → alert: observed_wall_conflict; alert: denial_lifted

Asserted checks

DatePersonVersionEngine says
2026-01-15rosapleading_v1✓ edit
2026-01-15rosaminutes_v1✓ deny
2026-03-15rosaminutes_v1✓ deny
2026-03-15rosapleading_v1✓ edit
2026-03-15samminutes_v1✓ edit
Access by person and group

2026-01-15

Personpleading_v1minutes_v1
rosaeditno access
sameditedit

2026-03-15

Personpleading_v1minutes_v1
rosaeditwalled · rosa-board-screen
sameditedit

A misfiled memo moved out of a wall

Content leaving a wall needs acknowledgement

Tess, screened from matter 42, has edit on matter 77. A memo filed in matter 42 by mistake is moved to matter 77 only with acknowledgement.

A misfiled memo moved out of a wall: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Feb 15 matter42 person tess: walled from matter42 by tess-screentess matter77 person tess: edit on matter77tess memo edit walled A misfiled memo moved out of a wall: peopleGroups with their members, nested groups within. People Feb 15 tess
A misfiled memo moved out of a wallTess, screened from matter 42, has edit on matter 77. A memo filed in matter 42 by mistake is moved to matter 77 only with acknowledgement. granted screened refused moved out tess tess: walled · tess-screen from Jan 5 to Feb 1. walled by tess-screen tess: edit from Feb 1 onward. via person tess on matter77 Jan 5 Feb 1 edit walled checked

✓ 2 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 Matter 77 is opened root_created
  3. 2026-01-05 A research memo for matter 77 is filed in matter 42 by mistake version_created
  4. 2026-01-05 Tess gets edit on matter 77 granted
  5. 2026-01-05 Tess is screened from matter 42 wall_raised
  6. 2026-02-01 Moving the memo to matter 77 without acknowledgement is refused document_moved refused memo would leave wall tess-screen; resubmit with acknowledge_override
  7. 2026-02-01 It is moved again, acknowledged document_moved → alert: left_walled_scope

Asserted checks

DatePersonVersionEngine says
2026-01-15tessmemo_v1✓ deny
2026-02-15tessmemo_v1✓ edit
Access by person and group

2026-01-15

Personmemo_v1
tesswalled · tess-screen

2026-02-15

Personmemo_v1
tessedit

A witness denied the privileged folder

Denials cut a chain

Uma has edit on matter 42, and wrote a memo deep inside its privileged folder. Once she is to be a witness she is denied that folder, and no grant of her own below it lets her back in.

A witness denied the privileged folder: foldersFolders and documents, with who is granted, denied or walled on each folder. Folders Feb 15 matter42 person uma: edit on matter42uma pleading privileged person uma: denied on privilegeduma memos person uma: read on memos (override)uma memo read edit denied override A witness denied the privileged folder: peopleGroups with their members, nested groups within. People Feb 15 uma
A witness denied the privileged folderUma has edit on matter 42, and wrote a memo deep inside its privileged folder. Once she is to be a witness she is denied that folder, and no grant of her own below it lets her back in. granted denied grant refused deeper grant uma pleading uma pleading: edit from Jan 5 onward. via person uma on matter42 uma memo uma memo: edit from Jan 5 to Feb 1. via person uma on matter42 uma memo: no access from Feb 1 onward. denied, via person uma on matter42 › privileged Jan 5 Feb 1 10 edit no access checked

✓ 3 checks hold · SVG: folders, people, timeline · JSON

Step log
  1. 2026-01-05 Matter 42 is opened root_created
  2. 2026-01-05 A privileged folder is added folder_created
  3. 2026-01-05 A memos folder is added under it folder_created
  4. 2026-01-05 A pleading is filed at the root version_created
  5. 2026-01-05 Uma files a memo version_created
  6. 2026-01-05 Uma gets edit on the matter granted
  7. 2026-02-01 Uma will testify: she is denied the privileged folder denied
  8. 2026-02-10 Granting her read on the privileged folder is refused: lift the denial instead granted refused person uma's entry on privileged is a denial; use DenialLifted
  9. 2026-02-10 Granting her read on her memos commits, but opens nothing granted

Asserted checks

DatePersonVersionEngine says
2026-01-15umamemo_v1✓ edit
2026-02-15umamemo_v1✓ deny
2026-02-15umapleading_v1✓ edit
Access by person and group

2026-01-15

Personpleading_v1memo_v1
umaeditedit

2026-02-15

Personpleading_v1memo_v1
umaeditno access