access-tags-union-inheritance

IN premise

A derived node's `access_tags` is the sorted, deduplicated union of all antecedent tags across all justifications, merged with any explicit tags on the node itself.

Summary

When a node is derived from other nodes, its access permissions are computed automatically by combining the access tags from all the nodes it depends on, plus any tags set directly on it. This means derived knowledge inherits the most restrictive visibility — if any input is tagged "confidential," the output will be too, ensuring sensitive information doesn't leak through derivation chains.

Details

Sourceentries/2026/04/24/tests-test_access_tags.md