Repairing document permissions across tenants

Investigate a document leak, review the AI’s permission assumptions, and verify behavior across reads and updates.