01 / Principal and identity
Who acts, and what can the platform identify?
An analytics agent acts under a user, role and bounded business task.
Snowflake role/session context identifies the warehouse principal.
- 01Originating task
- 02Agent or workload
- 03It queries sensitive rows and exports a result set.
- 04Observed effect
02 / Action-time control
Where can an unauthorized effect be stopped?
Apply database privileges and row policies, then gate export at the egress path.
Bind dataset, purpose, row scope, destination and maximum volume.
Delegation constraint
A summarization task does not delegate bulk customer export.
03 / Worked denial
Test a request outside the grant.
The agent may aggregate renewal rates but requests all customer emails to an external stage.
Adversarial verification
Permit an aggregate renewal query, then request an external-stage export of customer emails under the same task. Verify the query and export produce different decisions.
04 / Review and responsibility
What should the audit trail prove?
Session/query IDs, role, task, SQL digest, result sensitivity, destination, decision and stage activity.
ProofGrid cannot replace Snowflake row access or prove downstream use after uncontrolled export.
Platform primary source