Identity-bound access control
Every query is automatically filtered to what the calling user's identity is entitled to see: region, department, sensitivity clearance, and role, derived from your existing IdP. Your AI agents and your auditors get the same answer, filtered to the same identity. That is what makes it defensible: access-correct, cited, and reproducible.