Design Pattern
Permissions across linked Eidolons
When one reflection links to another, decide what a reader inherits, what it must request, and what it may never see. Permission has to travel with the link, or a worker cleared for one Eidolon can read every executive, customer, and system Eidolon it references.
The problem
A graph of reflections is only safe if permission travels with the link. A worker authorised to read the company Eidolon should not automatically read every executive, customer, and system Eidolon it references.
Give each reflection a tier, give each link a stated inheritance, and resolve access at read time against the worker's own authorisation rather than at authoring time.
Open question
Claim: unknown
Whether a projection can be generated automatically for a given tier without leaking through summary and inference is not established. Summaries of restricted material can restate it.