Access is notEvidence.
Retrieval makes information available. The Evidence Firewall enforces which candidate information may acquire Evidence standing for a proposition—and preserves the provenance, rights, currency, conflicts, and proof that continue to govern that standing.
Evidence requires standing.
RAG made it possible for models to work with information beyond their training data, but relevance alone does not establish whether the material can be relied upon. A passage might be stale, a signed policy superseded, or a connected record authoritative for one field but merely informative for another. Reading may be permitted while export is prohibited, and even credible sources may disagree. The Evidence Firewall addresses those distinctions before material is admitted into an undertaking.
Indwel therefore separates acquisition from admission. Search, vector similarity, SQL, APIs, connected applications, uploaded files, external research, and prior Work can all produce candidate information. None can promote its own output into Evidence.
Evidence is governed standing established under the Work’s applicable Evidence obligations and admission conditions. The undertaking can preserve what was found, why particular material was entitled to support a proposition, what conditions traveled with it, what was excluded or superseded, and what the Work ultimately relied upon.
Admission preserves the basis on which candidate material acquires standing and the conditions that continue to govern it.
Origin, provider, object identity, version, acquisition path, custody, integrity, and provenance remain attributable.
The system tests whether the source is allowed and relevant for the particular undertaking and proposition it is being asked to support.
Freshness, expected coverage, duplication, contradiction, corroboration, completeness, and supersession remain explicit.
Privacy, confidentiality, retention, export, region, license, disclosure, and sensitivity obligations travel with the material.
Material can be admitted, bounded, challenged, superseded, quarantined, refused, or held for review without losing the reason.
Collections and sufficiency
A Collection is more than an index or vector store. Its Sovereign Collection Contract can define which sources and versions are in scope, the selectors that are valid, whether the expected result set is enumerable, how exact, structured, hybrid, and semantic retrieval may be used, what ordering and completeness are knowable, which rights attach to the material, and what proof a retrieval must carry.
That makes sufficiency inspectable. Where the domain can be enumerated, “nothing found” has meaning only if the system can show what complete would have meant and what was actually searched. If a diligence Collection expects 47 control artifacts, the Work can distinguish 47 acquired and 47 admissible from 45 admissible, one superseded, and one unavailable. Absence, incompleteness, and negative Evidence can therefore remain facts rather than impressions.
Indwel uses deterministic retrieval where scope can be known, structured or hybrid retrieval where the domain requires it, and semantic retrieval where relevance is genuinely probabilistic. The design preference is objective before probability: the model is not asked to infer the rules of the information estate from whatever context happened to arrive.
File security and admission
File security and Evidence admission are deliberately separate. In the AWS reference implementation, uploaded material passes through S3 landing, quarantine, vault, and metadata boundaries, with GuardDuty Malware Protection for S3 providing malware inspection before the material can become eligible for cognition. Passing that security gate does not give the document Evidence standing.
Information retrieved through OpenSearch Serverless, Aurora PostgreSQL/pgvector, a governed connector, an API, or Fieldwork likewise remains candidate material until its standing is resolved. The technology that found a source cannot declare that source sufficient.
Conflict, supersession, and time
Two credible sources can disagree. A later record can supersede an earlier one. A source can govern one proposition and not the next. Standing can expire or be revoked. The Evidence Firewall preserves those conditions instead of forcing them into agreement for the sake of a fluent answer.
Consider a security review grounded perfectly in a signed 2024 policy that says a control is satisfied. The citation can be authentic, relevant, and accurately quoted while the conclusion is institutionally wrong because a 2025 policy superseded it. Grounding quality alone cannot answer that question. Standing, effective date, supersession, expected completeness, and the applicable institutional rule must be resolved first.
Cognitive Governors can require another source, narrow the claim, preserve disagreement, invoke interrogatory authority to ask the responsible office, or refuse to advance. The result is an inspectable basis for judgment rather than a citation-shaped confidence signal.
Rights and custody
Evidence does not become unrestricted because it has standing. Material may be admissible for one Work yet unavailable to another model, provider, region, person, tool, downstream action, or disclosure channel. Classification, rights, retention, export, and disclosure obligations continue to govern after admission.
The receipt therefore preserves the distinction between what was available, what was considered, what was admitted, what was excluded, challenged, or superseded, and what ultimately supported the Work. Later reviewers do not have to reconstruct the institution’s law of evidence from a transcript.
Grounding begins too late.
Contemporary guardrails can test whether a response is grounded in supplied context. That is useful, but it begins after the context has already been selected. Indwel asks the prior institutional question: was this material entitled to support this proposition as Evidence at all?
That separation lets retrieval technology, source systems, and models change without changing the enterprise’s law of evidence.
Inference after admission
Once Evidence has standing, a different boundary governs what cognition may conclude from it. Model choice, provider and venue, independence, budgets, fallback, support obligations, and the status of the resulting inference remain outside the model’s discretion.
Evidence custody
Provenance, standing, conditions, conflicts, exclusions, and the Evidence actually relied upon remain part of the governed undertaking from admission through Settlement.