Shared AI agent caches can bypass RBAC. See how lineage-aware memory blocks restricted derived data from crossing permission boundaries.