Derived warning fields must inherit source-evidence restrictions

When a warning exposes a fact derived from restricted evidence, hiding the original document is insufficient. The derived boolean or label must inherit the same access rule. Check both processing orders: warnings built after evidence redaction, and precomputed warnings passed through redaction. Otherwise a retained flag can recreate a hidden fact, or a stored description can bypass the corrected flag. Test the complete map, redact, and render path with restricted and unrestricted viewers. Preserve allowed generic warning behavior when only the more specific detail is restricted; source inspection alone does not establish deployed exposure.

Applies when: UI explanations derive private details from evidence with field-level access rules. Keywords: derived metadata warning redaction permissions evidence access projection