The most complete architectural statement so far. Delivering the right knowledge, to the right agent, with the right permissions, at the right freshness is framed as a control-plane problem: declarative manifests, a reconciliation loop, a permission engine, and a three-tier model where agent authority is always a strict subset of human authority. The governance ablation is the useful bit, ACL filtering eliminates cross-domain leaks and intent routing cuts noise by 19 points, each layer earning its place separately. Whether or not the Kubernetes analogy survives contact with a real org, the abstraction list reads as a design checklist.