The lineage piece for inherited permissions: ChatGPT connects to Slack, SharePoint, Drive and GitHub, and sees only what each user is already authorised to view in the source system. Pragmatic, shippable, and the ceiling is visible: the brain's access model is only as coherent as the ACLs it inherits, and nobody's SharePoint permissions were designed to encode who should know what.