← All explainers
Learn
Questions that cross systems
A question is split into one request per system that holds part of the answer, each authorized as the person asking, and the parts are joined on people, resources, time and place.
Legs, one per pillar
The engine identifies which pillars hold the answer and asks each for a plan. Independent legs run in parallel.
Joined on what they share
Results are joined on principal, resource, timestamp and location, so “without badging in” becomes an anti-join between footage and the access log.
Nothing the asker cannot see
Every leg is authorized at plan time as the asker, the engine holds no privileges of its own, and what was excluded is named in the answer.