Related doc
Security & Trust BoundariesEight named trust boundaries, four data classifications, deny-by-default egress, and the declassifier projection contract.
Open docDefined term / workflow
Data classification
One of four labels — public, org-internal, tenant-restricted, secret — that gates every record's lifecycle.
Classification is not a comment; it is a typed field on records, payloads, citations, and telemetry. Routes, declassifiers, and redaction policies all reason about it. There is no implicit "this is fine to share."