Ideas · Builder Notes

A caller's classification is a floor, not an override

In Kognita alpha a caller-supplied classification header can raise sensitivity but never skip the content classifier.

Ahmed Muzammil19 October 2026

Context

A caller could send a low classification header and skip the content classifier, so sensitive content went out unredacted.

The classifier always runs.
The effective label is the more sensitive of the classifier label and the typed value.

This closed the drift noted during 0.3: a typed classification could lower the label.

Redaction, egress ceilings and taint now apply whatever the caller claims.

Classifier quality now matters more, because it always runs.

Let callers make things stricter, never looser.

Kognita is an open-source alpha. This note comes from Kognita PR #65 in the Kognita repository.