Namespace boundaries

Filter before selection. Do not ask a model to ignore unrelated or unauthorized evidence afterward.

Examplets

const policyHits = query(pack, question, {
  topK: 20, namespace: ['policies', 'compliance'],
});
const exactSourceHits = query(pack, question, {
  topK: 10, source: ['policy.refunds', 'policy.enterprise-billing'],
});

Useful boundaries include tenants, departments, product versions, investigation cases, and public versus internal material.

V5 policy evaluation is a separate contract. It is bound to the committed policy root and is still not a credential store. See Policy and authority. Composition policy (allow / deny inside compositionRoot) does not replace host authorization either.