Finds content that stays reachable through a shared RAG stack after access was revoked — especially the summary-side leak, where the ACL change reaches the index but never reaches the summary, agent memory or cache built from it.
Revoke a permission in a RAG system and the vector index stops serving the document immediately. The summary you wrote from it yesterday keeps being served — and so do the agent-memory entry and the cached answer — because nothing records that they were derived from that document. A correct ACL filter, and the user still gets revoked content back. Clearance walks the span-level lineage of every derivative on revocation and redacts exactly the affected text.