INDWEL / EVIDENCE FIREWALL
Evidence Firewall
Retrieval makes information available. The Evidence Firewall governs what may be treated as Evidence, for which proposition, under which conditions, and with what proof.
Evidence requires standing
RAG solved an important problem: it let models work with information beyond their training data. It did not solve the institutional question of standing. A relevant passage may be stale. A signed policy may have been superseded. A connected record may be authoritative for one field and merely informative for another. A source may be permitted to read but prohibited from export. Two credible sources may disagree.
Indwel therefore separates acquisition from admission. Search, vector similarity, SQL, APIs, connected applications, uploaded files, external research, and prior Work can all produce candidate information. None can promote its own output into Evidence.
Evidence is a governed status conferred for a purpose. The undertaking can preserve what was found, why particular material was entitled to support a proposition, what conditions travelled with it, what was excluded or superseded, and what the Work ultimately relied upon.
Admission preserves the basis on which candidate material acquires standing and the conditions that continue to govern it.
Origin, provider, object identity, version, acquisition path, custody, integrity, and provenance remain attributable.
The system tests whether the source is allowed and relevant for the particular undertaking and proposition it is being asked to support.
Freshness, expected coverage, duplication, contradiction, corroboration, completeness, and supersession remain explicit.
Privacy, confidentiality, retention, export, region, licence, disclosure, and sensitivity obligations travel with the material.
Material can be admitted, bounded, challenged, superseded, quarantined, refused, or held for review without losing the reason.
Collections and sufficiency
A Sovereign Collection is more than an index or vector store. Its contract can define which sources and versions are in scope, the selectors that are valid, whether the expected result set is enumerable, how exact, structured, hybrid, and semantic retrieval may be used, what ordering and completeness are knowable, which rights attach to the material, and what proof a retrieval must carry.
That makes sufficiency inspectable. Where the domain can be enumerated, “nothing found” has meaning only if the system can show what complete would have meant and what was actually searched. If a diligence Collection expects 47 control artifacts, the Work can distinguish 47 acquired and 47 admissible from 45 admissible, one superseded, and one unavailable. Absence, incompleteness, and negative Evidence can therefore remain facts rather than impressions.
Indwel uses deterministic retrieval where scope can be known, structured or hybrid retrieval where the domain requires it, and semantic retrieval where relevance is genuinely probabilistic. The design preference is objective before probability: the model is not asked to infer the rules of the information estate from whatever context happened to arrive.
File security and admission
File security and Evidence admission are deliberately separate. In the AWS reference implementation, uploaded material passes through S3 landing, quarantine, vault, and metadata boundaries, with GuardDuty Malware Protection for S3 providing malware inspection before the material can become eligible for cognition. Passing that security gate does not make the document authoritative.
Information retrieved through OpenSearch Serverless, Aurora PostgreSQL/pgvector, a governed connector, an API, or Fieldwork likewise remains candidate material until its standing is resolved. The technology that found a source cannot declare that source sufficient.
Conflict, supersession, and time
Two credible sources can disagree. A later record can supersede an earlier one. A source can govern one proposition and not the next. Standing can expire or be revoked. The Evidence Firewall preserves those conditions instead of forcing them into agreement for the sake of a fluent answer.
Consider a security review grounded perfectly in a signed 2024 policy that says a control is satisfied. The citation can be authentic, relevant, and accurately quoted while the conclusion is institutionally wrong because a 2025 policy superseded it. Grounding quality alone cannot answer that question. Standing, effective date, supersession, expected completeness, and the applicable institutional rule must be resolved first.
Cognitive Governors can require another source, narrow the claim, preserve disagreement, invoke interrogatory authority to ask the responsible office, or refuse to advance. The result is an inspectable basis for judgement rather than a citation-shaped confidence signal.
Rights and custody
Evidence does not become unrestricted because it has standing. Material may be admissible for one Work yet unavailable to another model, provider, region, person, tool, downstream action, or disclosure channel. Classification, rights, retention, export, and disclosure obligations continue to govern after admission.
The receipt therefore preserves the distinction between what was available, what was considered, what was admitted, what was excluded, challenged, or superseded, and what ultimately supported the Work. Later reviewers do not have to reconstruct the institution’s law of evidence from a transcript.
Grounding begins too late
Contemporary guardrails can test whether a response is grounded in supplied context. That is useful, but it begins after the context has already been selected. Indwel asks the prior institutional question: was this material entitled to govern this proposition at all?
That separation lets retrieval technology, source systems, and models change without changing the enterprise’s law of evidence.
Inference after admission
Once Evidence has standing, a different boundary governs what cognition may conclude from it. Model choice, provider and venue, independence, budgets, fallback, support obligations, and the status of the resulting inference remain outside the model’s discretion.
Evidence custody
Provenance, standing, conditions, conflicts, exclusions, and the Evidence actually relied upon remain part of the governed undertaking from admission through Settlement.