Lesson 4: Who may see what, and proving it afterwards
25 min read·13 Oct 2026
Module 12 · Lesson 4 · About 50 minutes · Needs: Module 5 Lesson 3 (permission filters and tenants) and Module 9 Lesson 4 (scope checks and untrusted content)
The situation
Hollin Answers goes to partners on 30 November. Farah Iqbal, the security lead, wants four answers first. Who can see each document and field, at every step? Can anything of Calder Fix reach Brook Street? Where does personal data end up, and how is it deleted? Can Hollin prove what an answer was based on?
One request is traced throughout: on Friday 9 October 2026 Lucy Hart of Brook Street asks what Hollin pays per hour of labour on case 30540, Ellie Shaw's X200. All Hollin data is simulated.