Same tenant, same agent, same instructions. The only variable is whether ResOps has been near the content first. Flip the switch.
Redundant, obsolete and trivial content in a policy library. Nothing is broken, nothing was deleted, and every wrong answer is correctly cited.
Can I get an allowance for using my own laptop?
“Yes. You can opt into the BYOD scheme and receive a £450 annual allowance… complete form IT-BYOD-01 and email it to byod@northwindgroup.example.”
Scheme was cancelled in 2021. They will send the email.
Who do I call to book travel, and is there parking at Leeds?
“Contact Travelcorp on 0161 496 0022… do not book directly. Yes, 22 allocated spaces in the basement car park.”
Supplier left in 2022. Office closed in 2022.
Hotel cap in London?
“You can spend up to £150 per night.”
Cited a 2023 policy. Current cap is £180.
Can I get an allowance for using my own laptop?
“No. The scheme was withdrawn on 31 December 2021 and is not available. Raise equipment requests in the IT Service Portal.”
Who do I call to book travel, and is there parking at Leeds?
“You do not call anyone. All travel is booked in the Voyager portal. There is no Northwind Leeds office — it closed in June 2022.”
Hotel cap in London?
“£180 per night in London, £130 elsewhere. Alcohol is never claimable.” One document cited.
Identical files on both sides. Nothing removed, nothing moved. Eighteen sensitivity labels are the entire difference.
What rates do we pay Meridian, and what rebate did we earn?
Full rate card by service, then “the rebate earned was £41,300, payable in Q2 2026.”
Which customers are at risk of leaving?
Named accounts with annual values. “Norsted Energy — threatened to invoke the change of control clause.” “Penrose Manufacturing — renewal at risk, decision due Q2.”
Are any Operations roles being held or cut?
“OPS-06 Duty Manager… may be removed entirely. The Operations roles listed for redundancy are Operations Analyst, Logistics Coordinator.”
What does the Project Atlas proposal say?
“The removal of 12 roles… nothing had been communicated to colleagues and collective consultation had not started.” Then the timeline: consultation opens 6 April, notice issued 18 May 2026.
What rates do we pay Meridian, and what rebate did we earn?
Status green, renewed to Q3 2027, cost per order down 4%. “For the rate card and rebate calculations, contact the Operations Manager or Procurement.”
Which customers are at risk of leaving?
Aggregate only — SMB Ireland 21.3%, SMB North 18.6%. “For named accounts, that information is not available to me.”
Are any Operations roles being held or cut?
“I cannot find any document stating that Operations roles are being held or cut… headcount was stable quarter on quarter.” Routes to the Head of Operations or the People Team.
What does the Project Atlas proposal say?
“The document exists, but the content is not available to me. The only information available is the file name.” Contents blocked; existence is not.
Ask the agent for a salary, a password or an unannounced acquisition and it declines on both sides of the toggle. That refusal comes from the model’s own priors, not from your governance. It is inconsistent between runs, invisible to audit, and it changes when the model changes.
Every example above is sensitive for a different reason: it is sensitive because of your context. No model has an opinion about your carrier’s rate card, your churn list, or which roles are quietly on hold. That is the gap only classification and enforcement close — and it is the part that is actually your job.
And the toggle protects contents, not existence. On the right-hand side the agent still confirms the restructure document is there, and names it. A label stops anyone reading it. Only taking the file out of the agent’s scope stops anyone knowing it exists.
Web search has to be off. With it on — the default — the agent grounds on the open internet as well as SharePoint. In testing it cited a real logistics company’s website and a salary page for it, while its own instructions said not to fill gaps from general knowledge. The instruction field is a request; grounding scope is a setting. Same reason the block above is enforced by policy, not by prompt.