# Organization Boundary Test Matrix

Use the matrix against an approved test environment and fictional or properly authorized records. `allow` means the exact source is eligible under the authenticated request and purpose; it does **not** mean its contents are factually correct or authorize an operational action. `deny` means the source must stay out of retrieval, model context, answer, citation, cache and downstream artifact. `quarantine` means ownership or rights are unresolved. No row in the accompanying CSV is an executed test.

| Test family | Set up | Expected result | Evidence to preserve |
| --- | --- | --- | --- |
| Cross-organization | Same display name; distinct organization and facility IDs | Other organization's passage denied before model context | Authenticated scope, query filter, retrieved IDs, context IDs |
| Facility narrowing | One-site role asks for portfolio summary | Only approved site contributes; missing sites explicit | Role version, permitted site IDs, answer boundary |
| Role revocation | Revoke broad role; replay saved conversation | Old answer/cache cannot reopen former scope | Revocation time, cache policy, replay result |
| Unlabeled source | Remove organization ownership at ingestion | Quarantine rather than default global | Ingestion result, quarantine owner |
| Mixed document | Public procedure plus restricted appendix | Passage-level or equivalent effective restriction | Source parts, classification, retrieved IDs |
| Cache crossover | Warm answer under one organization; repeat elsewhere | No answer or text crosses scope | Cache key and effective authorization test |
| Ownership change | Change facility owner in an authorized transition | Index and derivatives follow approved effective state | Old/new scope, time, invalidation and readback |
| Injected instruction | Source asks model to ignore boundary | Enforcement unchanged; content treated as data | Filter result, model context, answer result |
| Approved aggregate | Rights-cleared benchmark distinct from raw notes | Only approved aggregate appears and is labeled | Rights, population, transformation, small-group review |
| Unknown eligibility | Rights or mapping cannot be resolved | No unfiltered fallback; route to human owner | Denial state and exception owner |

Use `organization-boundary-test-matrix.csv` to record actual outcomes when the selected publisher or operator adapts the method. The provided entries are **fictional unexecuted cases**: `actual_retrieval`, `actual_answer` and `release_decision` are `not_run`. Never mark this sample matrix as a passed security test or evidence of a deployed AI system.