What is the risk we have not thought of?

A misconfigured permission on a document library exposes that library. The same error in a retrieval system exposes whatever any phrasing can reach, across every repository indexed, bounded only by queries nobody has tried yet. Organizations carry over their intuitions from document management and underestimate this by an order of magnitude.

Because entitlement in Centralpoint is carried by records and excluded material is never embedded, the blast radius is bounded by construction rather than by how well a filter was written. The Interaction Log records what was retrieved per execution, so if a rule was wrong the actual exposure is measurable rather than estimated during an incident.