Scope

A named label the user owns, applied to data the user controls. Scope tags are typed values declared in the vault and surfaced everywhere the platform makes a routing decision.

A scope tag determines provider routing (cloud allowed or local-only), capability exposure (which tools the agent sees), HITL gating (human review required or not), indexing posture (Lens-indexed or excluded), and consent class.

The substrate enforces scope deterministically at the dispatch layer, not by trusting the language model. See Scope and ACL.