Derived warning fields must inherit source-evidence restrictions
When a warning exposes a fact derived from restricted evidence, hiding the original document is insufficient. The derived boolean or label must inherit the same access rule. Check both processing orders: warnings built after evidence redaction, and precomputed warnings passed thr…