Per-Audience AI Entitlement
A single assistant serving an entire organization must either expose the least sensitive corpus to everyone or vary its surface by requester. The first is safe and nearly useless; the second is what people want and where the complexity lives. Entitlement means the retrieval surface is computed per requester, so a clinician, a billing clerk and a contractor asking identical questions draw from different material without any of them being filtered after the fact. The design consequence is that entitlement must be a property of records rather than of interface logic.
Audience and role assignments travel with each record in Centralpoint and are evaluated during retrieval, so the corpus differs per requester by construction. Because the assignments are the same ones governing document access, an entitlement change made for compliance reasons applies to the AI surface automatically rather than requiring a parallel configuration.