visible-to-superset-semantics
IN premise
A node with `access_tags: ["finance", "hr"]` is only visible to callers whose `visible_to` list contains both tags (superset/subset check, not intersection).
Summary
When a node is tagged with multiple access tags, a caller must have all of those tags in their visible_to list to see it, not just one of them. This means access control is conjunctive — having partial overlap isn't enough, which is stricter than an "any match" approach and prevents accidental exposure to users who only have clearance for some of the relevant domains.
Details
| Source | entries/2026/04/24/tests-test_access_tags.md |