Private data should be collected and used only for a stated purpose, with minimum necessary detail and a retention rule. Convenience alone does not justify wider access.

Purpose Limits Data Use

A trace links each run's inputs, node executions, decisions, tool calls, outputs, timing, and errors. It should support diagnosis without leaking unnecessary private content.

A Trace Records What Actually Happened

Subjects, roles, resources, purposes, and grants form an authorization graph. Retrieval should enforce allowed paths before content enters model context, not only before final display.

Authorization Can Be Evaluated as a Graph

In this situation—personalizing a tutor without exposing a learner's disability notes to unrelated tools—which choice best applies “Purpose Limits Data Use”?

Working memory supports the current run, episodic memory records selected experiences, and semantic memory stores reusable facts or concepts. Each needs different retrieval and retention rules.

Learn Before

Related