Prove it works¶

Ten minutes, two people, one question. Do this after setup and after every big guardrail change.

The test: Maria (HR) and Lee (Finance) both ask "anything about layoffs?". There is a file S:\HR\Layoffs 2027\plan.docx that only HR can open.

Pass: Maria's AI finds and summarizes the plan. Lee's AI finds nothing, and never even learns the folder exists.

1. Test each person in the console¶

Health check → Test as a person → Maria → Test this person. Check:

Gate account and Active Directory (live): enabled.
Groups Gate uses: includes HR.
Tools their AI gets: includes the files__ tools.
Share row for S:: guardrails allow, Windows allows.

Do the same for Lee. His S: row should also be fine; the difference is inside the folders.

2. Ask the AI¶

Sign in to the chat as each of them (or have them do it on their own PCs) and ask:

Anything about layoffs on the S drive?

Maria	Lee
Finds `HR\Layoffs 2027\plan.docx` and summarizes it	"I couldn't find anything about layoffs."

If Lee's AI mentions the folder name at all, something is wrong: run the Health check and look at the File shares rows.

3. Read the audit rows¶

Audit trail, filter by person:

Maria: files__search and files__read_file, decision allow, the rule that allowed it, the path, and "as maria@corp.example".
Lee: files__search, decision allow, result with hidden: 1 (or more). That count is the folder he was not shown. Its name is never stored.

Press Verify chain: the trail is intact.

4. Check a guardrail¶

Ask, as Maria: "What's in the Legal folder?" The audit row says deny, by never-legal, even though Windows might allow her.

On Lee's PC: open https://ai.corp.example/gate. He lands in the console with no login page, as himself (his name shows at the top).

All green?¶

Send Health check → Copy report to yourself as the baseline. If anything fails, the row it fails on links to its fix, and Troubleshooting covers the common ones.