The model
A governed mapof what exists.
Agents understand the estate without full access to the underlying data.
Filesystem
Files live in place across your existing systems. We don't move anything.
Local catalogue
Shelfmark indexes file metadata and structure only — not content.
Permissions
Your permissions define what each agent is allowed to see.
Agent view
Agents see only what they're allowed to see — nothing more.
The guarantees
Decided in the engine, not left to the caller.
You decide what an agent can see
No document content stored
No forced migration
No filesystem restructuring
No ingestion of thousands of files into model context
No broad “AI has access to everything” compromise