VOCE Agent Conformance · DATA-02

Access-control propagation

Do RAG indexes, caches and memories enforce the source system's current access rights?

Data, RAG & memoryA1+CriticalPermanent control URL
Normative wording

DATA-02 · Access-control propagation

Do RAG indexes, caches and memories enforce the source system's current access rights?

DomainData, RAG & memory
Expected ownerData / IAM
Minimum maturityA1+
CriticalityCritical
Target evidence stateTested
Expected evidence

Expected evidence

  • ACL propagation design
  • Revoked-user test
Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →