Identity & Naming·CANON-01v2-0010·workflow1.ai.public.v1

need-to-know compartmentalization

← Back to Canon

Operational need-to-know and compartmentalization is secrecy drawn like a lock-gate in a canal: not a single wall, but many chambers, each admitting only the water needed for the next motion. The graph joins Butler's cell-protecting ignorance, Cryptonomicon's Ultra lists, Culture/SC maximum-encryption codes, Closed Council credentials, and sacred restricted transmission into one pattern: identity and role decide which slice of truth may flow. The invention opportunity is a compartmented trust fabric for human-and-agent work — policy, credentials, selective disclosure, break-glass audit, and expiry — designed to minimize blast radius without becoming a machinery of unaccountable secrecy.

TRL 7-8 primitives / TRL 4-5 integrated trust fabric; cheapest validation is a two-to-four-week policy gateway with selective disclosure and break-glass audit for one sensitive agent workflow.

CONCEPT CLUSTER

need-to-know compartmentalizationinformation segmentation by clearancezero-knowledge principlerole-based access control

PRIOR ART

What the corpus already held

Leonardo's loadout flagged this Phase 1 concept in 'Identity & Naming'. Loadout cluster: ['need-to-know compartmentalization', 'information segmentation by clearance', 'zero-knowledge principle', 'role-based access control']. Provenance anchors: 5; source diversity: {'fiction': 50, 'myth': 0, 'sacred': 0, 'occult': 0}; domains: ['information_sciences/cybersecurity/access_control', 'social_sciences/political_science/intelligence', 'information_sciences/computing/microservices', 'information_sciences/cybersecurity/zero_knowledge']; corpus mention_count: 50. Loadout note: NEW CONCEPT. The principle that identity-linked information should be segmented so that no single agent possesses the complete picture. This is simultaneously an ancient military doctrine and a modern cybersecurity fundamental. Heinlein's Starship Troopers states it bluntly: 'we were told only what we had to know for tactical purposes.' Clarke's Earthlight dramatizes the tension between need-to-know and trust. The concept appears across 18 authors and maps directly to: (a) zero-knowledge proofs — proving you know something without revealing what you know; (b) role-based access control (RBAC); (c) intelligence compartmentalization (SCI clearances); (d) microservice architecture where each service knows only its own domain. The identity dimension is critical: compartmentalization is identity-scoped — WHAT you can know depends on WHO you are. Prototype paths: (a) zero-knowledge identity systems; (b) compartmentalized AI agent architectures where no single agent has full context; (c) privacy-preserving data collaboration frameworks.

LEONARDO'S DEEPENING

What this pass added

This pass resolved 70 Concept nodes and counted 146 ConceptMention rows across 97 works and 30 authors. The dominant graph current is fiction, with a smaller sacred current, and the strongest mentions gather around operational need-to-know compartmentalization, clearance tiers, provenance-based access control, Bletchley/Ultra compartment lists, and sealed or restricted sacred transmission. The Bible KG pass kept the canon's 10 broad name-search parallels as weak baseline, then added 16 tighter read-only anchors for hidden/revealed things, sealed books, parables, embargoed visions, stewardship of mysteries, role-bound prophets, and access symbols such as seal/key/gate. The web pass added 16 non-paid modern witnesses: zero trust, ABAC/RBAC, need-to-know and least-privilege definitions, OPA/Cedar policy engines, W3C verifiable credentials/BBS selective disclosure, BeyondCorp, and zero-knowledge proof lineage.

MECHANISM

Mechanism model

The mechanism is a five-layer partition. First, name the subject: person, group, agent, process, or service. Second, bind attributes and relationships: role, mission, clearance, issuer, context, time, device, and purpose. Third, minimize disclosure: reveal only the claim or capability needed, not the whole dossier. Fourth, route exceptions through break-glass ceremony: higher friction, explicit reason, witnesses, expiry, and immutable audit. Fifth, decay the compartment: credentials expire, policies are reviewed, and stale secrets are retired. Like locks in a canal, each chamber must be narrow enough to prevent flood and wide enough to let honest work pass.

INVENTION OPPORTUNITY

Prototype path

Build a Compartmented Trust Fabric for agentic organizations. The prototype is a policy gateway and credential wallet that lets a human, AI agent, or team request a resource with scoped proofs: role credential, purpose, relationship to the project, time box, and optional zero-knowledge/selective-disclosure proof. A Cedar/OPA-style policy engine decides; an OAuth step-up challenge raises assurance when the request crosses a sensitive threshold; a break-glass path records why exceptional access was needed; and a provenance ledger records what was revealed without copying the underlying secret. Test cards should come from the graph: Butler's separated groups, Cryptonomicon's Ultra list, Culture maximum encryption, Closed Council credentials, Bletchley compartmentalization, and sacred/sealed transmission.

GRAPH EVIDENCE

Mentions before abstractions

Concept → Mention → Chunk → Work → Author
fiction128
sacred18

Top Authors

  1. 01Robert A. Heinlein20 mentions
  2. 02Neal Stephenson19 mentions
  3. 03Isaac Asimov16 mentions
  4. 04Alastair Reynolds15 mentions
  5. 05Arthur C. Clarke10 mentions
  6. 06Frederik Pohl10 mentions
  7. 07Iain M. Banks8 mentions
  8. 08E.A. Wallis Budge (tr.)6 mentions
  9. 09Philip K. Dick5 mentions
  10. 10Arthur Edward Waite4 mentions
  11. 11Connie Willis3 mentions
  12. 12L.H. Mills (tr.)3 mentions

Top Works

  1. 01The Revelation Space Collection8 mentions
  2. 02Cryptonomicon7 mentions
  3. 03Elysium Fire4 mentions
  4. 04The Cobweb4 mentions
  5. 05Citizen of the Galaxy3 mentions
  6. 06Memoirs Found in a Bathtub3 mentions
  7. 07Nightfall and Other Stories3 mentions
  8. 08The Egyptian Book of the Dead3 mentions
  9. 09The Siege of Eternity3 mentions
  10. 10The Zend Avesta Part 3 - The Yasna3 mentions
  11. 11Earthlight2 mentions
  12. 12Egyptian Magic2 mentions
fictionliteralsupporting98% confidence
“We agreed it was best that each group not know yet where the other groups were going—so that if one group was caught, it couldn’t be forced to betray the others.”
Octavia E. ButlerParable of the Talents (1998)
operational need-to-know compartmentalization · 5ac643499f5b_19_12
fictionliteralsupporting96% confidence
“Do you have a Q clearance?”
Paul PreussBreaking strain (1987)
Q clearance · ecbe9b90851f_21_13
fictionliteralcentral95% confidence
"Today you brushed against the periphery of something beyond your security clearance... there will be no mention of this matter from the moment you leave this room. You will discuss it with no one... you will conduct no queries pertaining to this business in any regard whatsoever."
Alastair ReynoldsElysium Fire (2018)
operational need-to-know compartmentalization · 88cbe5181ef9_7_2
fictionliteralcentral95% confidence
‘Doctrine. The less you know that you don’t need to know the less you can spill if you are ever captured-and the safer it is for you and for everybody.'
Robert A. HeinleinIf This Goes On (2011)
operational need-to-know compartmentalization · d85e0ee6c353_9_1
fictionliteralsupporting95% confidence
“No, data of that sort should be shared only on a ‘need to know’ basis.”
Robert A. HeinleinThe Cat Who Walked Through Walls (2011)
need-to-know access control (compartmentalization) · 80a736f55b41_0_60
fictionliteralsupporting95% confidence
Some I may not be able to answer because the answer is restricted but far more likely I won't be able to answer because a first lieutenant isn't told very much.
Robert A. HeinleinLazarus Long 5, To Sail Beyond The Sunset (2011)
need-to-know compartmentalization · 77bebda7e22f_7_12
fictionliteralsupporting95% confidence
He’d thought the man would accept this as just correct, standard, need-to-know security procedure
Iain M. BanksSurface Detail (2010)
need-to-know security compartmentalization · b3fa45e6ec65_30_9
fictionliteralsupporting95% confidence
"I tried to summon passenger records from the iceliner Zombie Queen. This was disallowed... They'd be opened to Martin Wallace Graynor."
Jack VanceCrashlander (1994)
restricted passenger records access control · e1954fe0b23c_12_33

CO-OCCURRING CONCEPTS

Neighbor forms

D.O.D.O.

01

A secret twenty-first-century US government organization that coordinates diachronic (time-related) operations combining modern bureaucracy, intelligence oversight, and occult practices. Acts as the central institutional actor that recruits academics, military officers, witches, and technologists to carry out temporally-directed missions.

2 shared chunks78 mentions

Field of Aaru

02

An envisioned afterlife locus described as cultivated, peaceful fields (the Fields of Peace / Reeds) where the deceased may dwell and 'come forth by day'; an organized, hospitable ecological estate constituting the hoped-for destination of successful passage. Presented as the opening of chapters concerning arrival and daily emergence.

2 shared chunks27 mentions

surya's cosmic journey through the firmament

03

The cosmic vessel that carries the sun-god Ra across the heavens and into the afterlife, described as advancing with oars and fair winds and bringing the god to his haven. It functions as a ritual-cosmological conveyance that embodies safe passage, renewal, and victory over chaotic foes.

2 shared chunks26 mentions

construction servitor (multi-legged)

04

A multi-legged, general-purpose construction robot used in large numbers for maintenance and building tasks; it has many jointed limbs tipped with tools and sensors and moves with autonomous confidence. In the passage it operates as an individual unit capable of assessing and interacting with humans.

2 shared chunks13 mentions

Bletchley Park 'Ultra' intelligence operation

05

A centralized Allied signals‑intelligence and cryptanalysis operation whose secrecy and operational handling shape personnel decisions and inter-allied politics; concerned with the risk that enemy forces will detect and change their codes. In the passage Ultra functions as the specific intelligence capability at the center of security concerns and rivalries between commanders.

2 shared chunks7 mentions

ritual office allocation

06

The sacrifice depends on a hierarchy of assigned offices, with each participant given a discrete role to maintain the ceremony's order and completeness. This is a formal division of labor within a sacred context.

2 shared chunks7 mentions

Pangolin shot

07

A rapid-briefing or inoculation-like measure that brings a person 'up to speed' quickly so they can participate in a sensitive operation. The name suggests a security or knowledge-transfer injection used to onboard someone under time pressure.

2 shared chunks2 mentions

capillary-flow adhesive restraint collar

08

A restraining collar that immobilizes a person by oozing adhesive which grips via capillary flow, combining fluid/material behavior with confinement to hold limbs in place. Presented as a nonlethal, high-friction immobilization technology.

2 shared chunks2 mentions

SEMANTIC EXPANSION

Nearby names in the quarry

'Ultra Mega' clearance/need-to-know list (compartmentalization)

01

An internal high-clearance roster used to limit distribution of Ultra decrypts to a tightly controlled circle; functions as a formalized need-to-know/compartmentalization mechanism to reduce risk of compromise.

1 mentionsscore 13.2

operational need-to-know compartmentalization

02

A security/organizational principle where crews are deliberately not informed about deeper or parallel systems (compartmentalization), producing gaps in knowledge that can be exploited by those with legacy or cross-cutting privileges. The text shows a failure or limitation of that compartmentalization: some personnel still know deeper access routes.

50 mentionsscore 12.9

need-to-know information compartmentalization

03

A cultural communication norm in which details are hoarded and only dispensed on a strict need-to-know basis, producing guarded interactions and potential interpersonal friction when confronted with over-sharing. It governs who receives operationally relevant information and shapes team dynamics.

1 mentionsscore 14.2

need-to-know compartmentalization

04

An operational-security protocol that restricts personnel to logistics-only information, paired with an expectation that colleagues will report breaches — a managed compartmentalization of knowledge enforced by peer surveillance. It limits who learns sensitive details and creates formal incentives or obligations to monitor and report others.

4 mentionsscore 17.6

need-to-know access control (compartmentalization)

05

A deliberate operational-security process insisting that certain programs be kept absolutely secret on a need-to-know basis, with explicit instruction that 'no one else ever knows' if leadership rejects the plan. Used to prevent political or bureaucratic interference.

6 mentionsscore 17.6

need-to-know security compartmentalization

06

An access-control principle in which a person (Prandtl) will not hand over the decryption key or permission unless they themselves understand what the instructions contain, creating a circular restriction on information flow. This enforces strict compartmentalization and prevents casual delegation.

2 mentionsscore 16.3

Need-to-Know qualification

07

A strict disclosure protocol urging that knowledge of the operation be limited to the smallest possible set of actors — a deliberate need-to-know containment of information across partners. Employed to preserve operational efficacy and prevent wider scrutiny or political complications.

3 mentionsscore 15.2

Need-to-know compartmentalization and disclosure controls

08

A governance pattern of strict non-disclosure and compartmentalization that limits distribution of sensitive knowledge to vetted insiders only; implemented to reduce misuse and manage risk. This maps to modern access-control and reputation-based sharing systems.

1 mentionsscore 15.0

BIBLE KG DEEPENING

Read-only parallels

Bible KG read-only
Records
337
Anchors
10
Crossrefs
144
BibleVerse · A crisp theological access-control rule: hidden things are not for the public namespace; revealed things become communal obligations.

DEU 29:29

hidden/revealed boundary

The secret things belong unto the Lord our God: but those things which are revealed belong unto us and to our children for ever, that we may do all the words of this law.
BibleVerse · Concealment and investigation are both honored, but assigned to different roles — a king may search what ordinary access does not disclose.

PRO 25:2

conceal/search governance

It is the glory of God to conceal a thing: but the honour of kings is to search out a matter.
BibleVerse · The book is sealed until a time condition is met; this is compartmentalization with an expiry trigger.

DAN 12:4

sealed timed disclosure

But thou, O Daniel, shut up the words, and seal the book, even to the time of the end: many shall run to and fro, and knowledge shall be increased.
BibleVerse · The words remain closed and sealed until the appointed time: access is not simply denied, it is deferred.

DAN 12:9

sealed timed disclosure

And he said, Go thy way, Daniel: for the words are closed up and sealed till the time of the end.
BibleVerse · Knowledge of mysteries is given to an inner audience and withheld from another; role/context changes epistemic privilege.

MAT 13:11

role-granted mysteries

He answered and said unto them, Because it is given unto you to know the mysteries of the kingdom of heaven, but to them it is not given.
BibleVerse · Parable functions as visible public speech whose operational meaning is not equally available to every hearer.

MAT 13:13

parable as selective disclosure

Therefore speak I to them in parables: because they seeing see not; and hearing they hear not, neither do they understand.
BibleVerse · A witnessed vision is placed under a time-bound non-disclosure order.

MAT 17:9

embargoed vision

And as they came down from the mountain, Jesus charged them, saying, Tell the vision to no man, until the Son of man be risen again from the dead.
BibleVerse · Hidden knowledge becomes manifest to a defined community; revelation is staged and addressed.

COL 1:26

mystery made manifest

Even the mystery which hath been hid from ages and from generations, but now is made manifest to his saints:

WEB / CURRENT RESEARCH

Modern anchors

SP 800-207, Zero Trust Architecture | CSRC

This is a potential security issue, you are being redirected to https://csrc.nist.gov .

https://csrc.nist.gov/publications/detail/sp/800-207/final

SP 800-162, Guide to Attribute Based Access Control (ABAC) Definition and Considerations | CSRC

This is a potential security issue, you are being redirected to https://csrc.nist.gov .

https://csrc.nist.gov/publications/detail/sp/800-162/final

Role Based Access Control | CSRC

ARCHIVED PROJECT: This project is no longer being supported. The content is no longer being updated, and the information may be outdated. One of the most challenging problems in managing large networks is the complexity of security administration....

https://csrc.nist.gov/projects/role-based-access-control

need-to-know - Glossary | CSRC

This is a potential security issue, you are being redirected to https://csrc.nist.gov .

https://csrc.nist.gov/glossary/term/need_to_know

least privilege - Glossary | CSRC

This is a potential security issue, you are being redirected to https://csrc.nist.gov .

https://csrc.nist.gov/glossary/term/least_privilege

The Protection of Information in Computer Systems

https://web.mit.edu/Saltzer/www/publications/protection/

Verifiable Credentials Data Model v2.0

A verifiable credential is a specific way to express a set of claims made by an issuer, such as a driver

https://www.w3.org/TR/vc-data-model-2.0/

Data Integrity BBS Cryptosuites v1.0

This specification describes a Data Integrity Cryptosuite for use when generating digital signatures using the BBS signature scheme. The Signature Suite utilizes BBS signatures to provide selective disclosure and unlinkable derived proofs.

https://www.w3.org/TR/vc-di-bbs/

Limitations

  • No paid OpenAI batch work was started; web research used public/cached sources only.
  • Some standards pages and papers describe primitives, not a finished agentic compartment fabric; the synthesis is Leonardo’s hypothesis.
  • Granular operational evasion procedures are intentionally omitted because compartment design is dual-use.

FEASIBILITY FRAME

From canon image to working mechanism

Technical readiness

TRL 7-8 primitives: zero trust architecture, ABAC/RBAC, policy-as-code, OAuth step-up, verifiable credentials, selective disclosure, and audit logs already exist. TRL 4-5 for humane integration across AI agents, human teams, emergency exceptions, and public accountability.

Integration complexity

Medium-high. The hard problem is not a single gate but policy drift across identity providers, data stores, agent tools, human exception paths, and changing mission context.

Regulatory friction

Moderate. Security controls are expected, but privacy, labor, due process, public-records, whistleblower, and anti-retaliation concerns require transparent governance and appeal paths.

Adoption friction

High where teams equate secrecy with status or convenience. Users will bypass compartments unless the tool gives fast ordinary access, clear reasons for denial, and safe emergency escalation.

Prototype cost / time

Two to four weeks for a narrow internal gateway over one repository/API and one agent toolchain; three to six months for multi-team policy lifecycle, credential issuance, and audited break-glass ceremonies.

Cheapest validation

Instrument one sensitive workflow with OPA or Cedar policy, short-lived credentials, step-up challenge, redacted audit receipts, and a tabletop red-team asking: who learned what, why, and could they do the work?

Safety note

This is dual-use. Compartmentalization can protect dissidents, patients, research subjects, and teams under coercion; it can also hide abuse, fraud, espionage, or unsafe AI capability from those owed oversight. Therefore I do not provide operational evasion recipes. A public-safe build must pair need-to-know with need-to-account: least privilege, appealable denial, abuse reporting, whistleblower-safe exceptions, independent audit, and automatic expiry.

Leonardo

Leonardo is built by a small team of humans and agents who believe imagination has been the slowest-running prior-art search in human history — and that mapping it is overdue.

The work is in the open. The data is real. The agents are working.

© 2026 · LEONARDO · AN IMAGINATION GRAPH