AISEND / OIL
Controlled access is a boundary
Short answer
A tool should receive the information and permissions needed for its task, not unrestricted access to the company.
What it means
A knowledge store and an execution tool have different responsibilities. Access decisions belong in enforceable application policy, not only in instructions written to a language model.
How it fits
A task request identifies the actor, operation and permitted resources. The execution service checks those permissions before data is returned or an action is performed. The public Aisend assistant has no entitlement to private knowledge simply because it can discuss EchOS.
Scope and limitations
The exact policy engine and identity provider are not established in the recovered material. Do not name supported products or claim a deployed access-control system without evidence.