@tangle-network/agent-knowledge 4.1.0 → 5.0.0

package/dist/memory/index.js

@@ -24,7 +24,7 @@ import {
   runAgentMemoryExperiment,
   runAgentMemoryImprovement,
   toOffPolicyTrajectory
-} from "../chunk-CPMLJYA3.js";
+} from "../chunk-LMR53POQ.js";
 import {
   AgentMemoryLifecycleTimeoutError,
   AgentMemoryLifecycleUnsafeError,
@@ -37,7 +37,7 @@ import {
   resolveMemoryCleanupTimeoutMs,
   runBoundedMemoryLifecycle,
   sleepForMemoryRecovery
-} from "../chunk-BBCIB4UL.js";
+} from "../chunk-EYIA5PLQ.js";
 import "../chunk-DQ3PDMDP.js";
 import "../chunk-YMKHCTS2.js";
 export {

package/dist/{types-DP38encz.d.ts → types-BY-xLVw-.d.ts}

@@ -1,8 +1,8 @@
-import { JsonValue, Scenario, DispatchContext, RunImprovementLoopResult, ParameterCandidate, JudgeConfig, Gate, RunImprovementLoopOptions, MutableSurface, SurfaceProposer, CampaignStorage, CostLedgerHandle, CampaignResult } from '@tangle-network/agent-eval/campaign';
+import { Scenario, DispatchContext, MutableSurface, JudgeConfig, CampaignStorage, CostLedgerHandle, CampaignResult } from '@tangle-network/agent-eval/campaign';
 import { c as KnowledgeIndex, S as SourceRecord } from './types-6x0OpfW6.js';
+import { AgentCandidateJsonValue } from '@tangle-network/agent-interface';
 
-type RetrievalConfig = Record<string, JsonValue>;
-type RetrievalParameterSearchSpace = Record<string, readonly JsonValue[]>;
+type RetrievalConfig = Record<string, AgentCandidateJsonValue>;
 type RetrievalGoldTarget = {
     kind: 'page';
     pageId: string;
@@ -44,7 +44,7 @@ interface RetrievedKnowledgeHit {
     sourceIds?: readonly string[];
     sourceSpans?: readonly RetrievedSourceSpan[];
     snippet?: string;
-    metadata?: Record<string, JsonValue>;
+    metadata?: Record<string, AgentCandidateJsonValue>;
 }
 interface RetrievalEvalArtifact {
     config: RetrievalConfig;
@@ -54,7 +54,7 @@ interface RetrievalEvalArtifact {
     durationMs: number;
     /** Informational copy. Billable retrievers account through context.cost.runPaidCall. */
     costUsd?: number;
-    metadata?: Record<string, JsonValue>;
+    metadata?: Record<string, AgentCandidateJsonValue>;
 }
 interface RetrievalMetricSummary {
     recall: number;
@@ -79,7 +79,7 @@ interface RetrievalEvalRetrieverResult {
     hits: readonly RetrievedKnowledgeHit[];
     /** Informational copy. Billable retrievers account through context.cost.runPaidCall. */
     costUsd?: number;
-    metadata?: Record<string, JsonValue>;
+    metadata?: Record<string, AgentCandidateJsonValue>;
 }
 type RetrievalEvalRetriever = (input: RetrievalEvalRetrieverInput) => Promise<readonly RetrievedKnowledgeHit[] | RetrievalEvalRetrieverResult>;
 interface BuildRetrievalEvalDispatchOptions {
@@ -97,65 +97,22 @@ interface RetrievalRecallJudgeOptions {
     name?: string;
     weights?: RetrievalMetricWeights;
 }
-interface BuildRetrievalParameterCandidatesOptions {
-    baseline?: RetrievalConfig;
-}
-interface RetrievalParameterSweepProposerOptions {
-    candidates?: readonly ParameterCandidate[];
-    searchSpace?: RetrievalParameterSearchSpace;
-    baseline?: RetrievalConfig;
+interface PartitionRetrievalScenariosOptions {
+    selectionFraction?: number;
+    finalFraction?: number;
+    seed?: number;
 }
-type RetrievalLoopBaseOptions = RunImprovementLoopOptions<RetrievalEvalScenario, RetrievalEvalArtifact>;
-interface RunRetrievalImprovementLoopOptions {
-    baseline: RetrievalConfig;
-    scenarios: readonly RetrievalEvalScenario[];
-    holdoutScenarios?: readonly RetrievalEvalScenario[];
-    index?: KnowledgeIndex;
-    defaultK?: number;
-    retrieve?: RetrievalEvalRetriever;
-    candidates?: readonly ParameterCandidate[];
-    searchSpace?: RetrievalParameterSearchSpace;
-    judges?: readonly JudgeConfig<RetrievalEvalArtifact, RetrievalEvalScenario>[];
-    gate?: Gate<RetrievalEvalArtifact, RetrievalEvalScenario>;
-    metricWeights?: RetrievalMetricWeights;
-    targetRecall?: number;
-    holdoutFraction?: number;
-    splitSeed?: number;
-    deltaThreshold?: number;
-    runDir?: RetrievalLoopBaseOptions['runDir'];
-    seed?: RetrievalLoopBaseOptions['seed'];
-    reps?: RetrievalLoopBaseOptions['reps'];
-    resumable?: RetrievalLoopBaseOptions['resumable'];
-    costCeiling?: RetrievalLoopBaseOptions['costCeiling'];
-    maxConcurrency?: RetrievalLoopBaseOptions['maxConcurrency'];
-    dispatchTimeoutMs?: RetrievalLoopBaseOptions['dispatchTimeoutMs'];
-    expectUsage?: RetrievalLoopBaseOptions['expectUsage'];
-    tracing?: RetrievalLoopBaseOptions['tracing'];
-    storage?: RetrievalLoopBaseOptions['storage'];
-    populationSize?: RetrievalLoopBaseOptions['populationSize'];
-    maxGenerations?: RetrievalLoopBaseOptions['maxGenerations'];
-    promoteTopK?: RetrievalLoopBaseOptions['promoteTopK'];
-    maxImprovementShots?: RetrievalLoopBaseOptions['maxImprovementShots'];
-    report?: RetrievalLoopBaseOptions['report'];
-    findings?: RetrievalLoopBaseOptions['findings'];
-    now?: RetrievalLoopBaseOptions['now'];
-}
-interface RunRetrievalImprovementLoopResult extends RunImprovementLoopResult<RetrievalEvalArtifact, RetrievalEvalScenario> {
-    baselineConfig: RetrievalConfig;
-    winnerConfig: RetrievalConfig;
-    trainScenarios: readonly RetrievalEvalScenario[];
-    holdoutScenarios: readonly RetrievalEvalScenario[];
-    candidates: readonly ParameterCandidate[];
-    targetRecall?: number;
+interface RetrievalScenarioPartitions {
+    trainScenarios: RetrievalEvalScenario[];
+    selectionScenarios: RetrievalEvalScenario[];
+    finalScenarios: RetrievalEvalScenario[];
 }
 declare function retrievalConfigSurface(config: RetrievalConfig): string;
 declare function retrievalConfigFromSurface(surface: MutableSurface): RetrievalConfig;
 declare function buildRetrievalEvalDispatch(options: BuildRetrievalEvalDispatchOptions): (surface: MutableSurface, scenario: RetrievalEvalScenario, context: DispatchContext) => Promise<RetrievalEvalArtifact>;
 declare function retrievalRecallJudge(options?: RetrievalRecallJudgeOptions): JudgeConfig<RetrievalEvalArtifact, RetrievalEvalScenario>;
 declare function scoreRetrievalArtifact(artifact: RetrievalEvalArtifact, scenario: RetrievalEvalScenario): RetrievalMetricSummary;
-declare function buildRetrievalParameterCandidates(searchSpace: RetrievalParameterSearchSpace, options?: BuildRetrievalParameterCandidatesOptions): ParameterCandidate[];
-declare function retrievalParameterSweepProposer(options: RetrievalParameterSweepProposerOptions): SurfaceProposer;
-declare function runRetrievalImprovementLoop(options: RunRetrievalImprovementLoopOptions): Promise<RunRetrievalImprovementLoopResult>;
+declare function partitionRetrievalScenarios(scenarios: readonly RetrievalEvalScenario[], options?: PartitionRetrievalScenariosOptions): RetrievalScenarioPartitions;
 
 type AgentMemoryKind = 'message' | 'entity' | 'fact' | 'preference' | 'observation' | 'reasoning-trace';
 interface AgentMemoryScope {
@@ -662,4 +619,4 @@ interface BuildRetrievalBenchmarkCasesFromQrelsOptions {
     splitOf?: (queryId: string) => KnowledgeBenchmarkSplit;
 }
 
-export { type RetrievalHoldoutConfig as $, type AgentMemoryAcquireRunLease as A, type BuildRetrievalBenchmarkCasesFromQrelsOptions as B, type KnowledgeBenchmarkSpec as C, type KnowledgeBenchmarkSplit as D, type KnowledgeBenchmarkTaskKind as E, type KnowledgeClaimMatcher as F, type KnowledgeMemoryBenchmarkCase as G, type KnowledgeMemoryBenchmarkTaskKind as H, type KnowledgeMemoryEvent as I, type KnowledgeMemoryFactMatcher as J, type KnowledgeAnswerBenchmarkCase as K, type KnowledgeRetrievalBenchmarkCase as L, type KnowledgeRetrievalBenchmarkQrel as M, type KnowledgeRetrievalBenchmarkQuery as N, type MemoryAdapterBenchmarkCandidate as O, type MemoryAdapterBenchmarkRankingRow as P, type OwnedAgentMemoryRunLease as Q, type RunRetrievalImprovementLoopResult as R, type RetrievalConfig as S, type RetrievalEvalArtifact as T, type RetrievalEvalRetriever as U, type RetrievalEvalRetrieverInput as V, type RetrievalEvalRetrieverResult as W, type RetrievalEvalScenario as X, type RetrievalGoldTarget as Y, type RetrievalHoldoutBypassReason as Z, type RetrievalHoldoutCallContext as _, type RunRetrievalImprovementLoopOptions as a, type RetrievalHoldoutEligibleItem as a0, type RetrievalHoldoutEvent as a1, type RetrievalHoldoutResult as a2, type RetrievalHoldoutSessionState as a3, type RetrievalMetricSummary as a4, type RetrievalMetricWeights as a5, type RetrievalParameterSearchSpace as a6, type RetrievalParameterSweepProposerOptions as a7, type RetrievalRecallJudgeOptions as a8, type RetrievedKnowledgeHit as a9, type RetrievedSourceSpan as aa, type RunKnowledgeBenchmarkSuiteOptions as ab, type RunKnowledgeBenchmarkSuiteResult as ac, type RunMemoryAdapterBenchmarkOptions as ad, type RunMemoryAdapterBenchmarkResult as ae, acquireAgentMemoryRunLease as af, buildRetrievalEvalDispatch as ag, buildRetrievalParameterCandidates as ah, retrievalConfigFromSurface as ai, retrievalConfigSurface as aj, retrievalParameterSweepProposer as ak, retrievalRecallJudge as al, runRetrievalImprovementLoop as am, scoreRetrievalArtifact as an, type AgentMemoryAdapter as b, type AgentMemoryBranchIsolation as c, type AgentMemoryContext as d, type AgentMemoryControllerMode as e, type AgentMemoryHit as f, type AgentMemoryKind as g, type AgentMemoryRunLease as h, type AgentMemoryScope as i, type AgentMemorySearchOptions as j, type AgentMemoryWriteInput as k, type AgentMemoryWriteResult as l, type BuildRetrievalEvalDispatchOptions as m, type BuildRetrievalParameterCandidatesOptions as n, type KnowledgeAnswerBenchmarkTaskKind as o, type KnowledgeBenchmarkArtifact as p, type KnowledgeBenchmarkCase as q, type KnowledgeBenchmarkCaseBase as r, type KnowledgeBenchmarkDistribution as s, type KnowledgeBenchmarkEvaluation as t, type KnowledgeBenchmarkFamily as u, type KnowledgeBenchmarkReport as v, type KnowledgeBenchmarkResponder as w, type KnowledgeBenchmarkScenario as x, type KnowledgeBenchmarkSliceSummary as y, type KnowledgeBenchmarkSource as z };
+export { type RetrievalHoldoutConfig as $, type AgentMemoryAcquireRunLease as A, type BuildRetrievalBenchmarkCasesFromQrelsOptions as B, type KnowledgeBenchmarkScenario as C, type KnowledgeBenchmarkSliceSummary as D, type KnowledgeBenchmarkSource as E, type KnowledgeBenchmarkSpec as F, type KnowledgeBenchmarkSplit as G, type KnowledgeBenchmarkTaskKind as H, type KnowledgeClaimMatcher as I, type KnowledgeMemoryBenchmarkCase as J, type KnowledgeAnswerBenchmarkCase as K, type KnowledgeMemoryBenchmarkTaskKind as L, type KnowledgeMemoryEvent as M, type KnowledgeMemoryFactMatcher as N, type KnowledgeRetrievalBenchmarkCase as O, type KnowledgeRetrievalBenchmarkQrel as P, type KnowledgeRetrievalBenchmarkQuery as Q, type RetrievalConfig as R, type MemoryAdapterBenchmarkCandidate as S, type MemoryAdapterBenchmarkRankingRow as T, type OwnedAgentMemoryRunLease as U, type PartitionRetrievalScenariosOptions as V, type RetrievalEvalRetrieverInput as W, type RetrievalEvalRetrieverResult as X, type RetrievalGoldTarget as Y, type RetrievalHoldoutBypassReason as Z, type RetrievalHoldoutCallContext as _, type RetrievalEvalScenario as a, type RetrievalHoldoutEligibleItem as a0, type RetrievalHoldoutEvent as a1, type RetrievalHoldoutResult as a2, type RetrievalHoldoutSessionState as a3, type RetrievalMetricSummary as a4, type RetrievalRecallJudgeOptions as a5, type RetrievalScenarioPartitions as a6, type RetrievedSourceSpan as a7, type RunKnowledgeBenchmarkSuiteOptions as a8, type RunKnowledgeBenchmarkSuiteResult as a9, type RunMemoryAdapterBenchmarkOptions as aa, type RunMemoryAdapterBenchmarkResult as ab, acquireAgentMemoryRunLease as ac, buildRetrievalEvalDispatch as ad, partitionRetrievalScenarios as ae, retrievalConfigFromSurface as af, retrievalConfigSurface as ag, retrievalRecallJudge as ah, scoreRetrievalArtifact as ai, type RetrievalEvalArtifact as b, type RetrievalEvalRetriever as c, type RetrievalMetricWeights as d, type RetrievedKnowledgeHit as e, type AgentMemoryAdapter as f, type AgentMemoryBranchIsolation as g, type AgentMemoryContext as h, type AgentMemoryControllerMode as i, type AgentMemoryHit as j, type AgentMemoryKind as k, type AgentMemoryRunLease as l, type AgentMemoryScope as m, type AgentMemorySearchOptions as n, type AgentMemoryWriteInput as o, type AgentMemoryWriteResult as p, type BuildRetrievalEvalDispatchOptions as q, type KnowledgeAnswerBenchmarkTaskKind as r, type KnowledgeBenchmarkArtifact as s, type KnowledgeBenchmarkCase as t, type KnowledgeBenchmarkCaseBase as u, type KnowledgeBenchmarkDistribution as v, type KnowledgeBenchmarkEvaluation as w, type KnowledgeBenchmarkFamily as x, type KnowledgeBenchmarkReport as y, type KnowledgeBenchmarkResponder as z };

package/docs/eval/rag-eval-roadmap.md

@@ -1,6 +1,6 @@
 # RAG Eval Completion Roadmap
 
-Verdict: `runRetrievalImprovementLoop()` is the right first loop, but it is only the retrieval layer.
+Verdict: use retrieval-only optimization when the retriever is the only changing component, and full RAG optimization when retrieval and answer behavior must move together.
 SOTA RAG evaluation requires retrieval quality, context quality, generated-answer quality, abstention behavior, robustness, and operating budgets.
 
 ## Research Basis
@@ -19,12 +19,15 @@ SOTA RAG evaluation requires retrieval quality, context quality, generated-answe
 
 Done:
 
-- `runRetrievalImprovementLoop()` auto-searches retrieval configs through `agent-eval`.
+- `runRetrievalImprovementLoop()` runs a complete `agent-eval` optimization method over retrieval configs.
+- `runRagOptimization()` does the same for a serialized retrieval and answer configuration.
 - `runRagKnowledgeImprovementLoop()` exposes the whole RAG lifecycle as typed phases:
   retrieval tuning, gap diagnosis, knowledge acquisition, knowledge update, answer-quality eval, and promotion.
 - Retrieval scenarios can label pages, page paths, sources, source anchors, and source spans.
-- The retrieval judge reports recall, MRR, nDCG, precision@k, cost, and held-out promotion.
-- The loop is tested with a real `agent-eval` run where `{ k: 2 }` beats `{ k: 1 }`.
+- The retrieval judge reports recall, MRR, nDCG, and precision@k; `agent-eval` reports cost separately.
+- Selection and final data remain independent, and the optimization method never receives final cases.
+- Every reusable optimization requires an immutable execution reference covering retrieval, index, model, judge, and external-service behavior.
+- The integration is tested with complete methods for retrieval and full RAG configuration.
 - The lifecycle loop is tested both with pluggable phase hooks and with a real local KB update through `runKnowledgeResearchLoop()`.
 - `ragAnswerQualityJudge()` and `createRagAnswerQualityHook()` score context precision/recall/relevance/sufficiency, faithfulness, answer relevance/correctness, citation support, abstention, and unsupported-answer rate.
 - `normalizeExternalRagScores()` and the row exporters make Ragas, DeepEval, TruLens, RAGChecker, and custom evaluator outputs pluggable instead of hard dependencies.
@@ -56,9 +59,9 @@ Required slices:
 
 Ship criteria:
 
-- Holdout source-span Recall@5 is at least 0.90.
-- Holdout nDCG@5 is at least 0.80.
-- Train-to-holdout recall gap is at most 0.08.
+- Final source-span Recall@5 is at least 0.90.
+- Final nDCG@5 is at least 0.80.
+- Train-to-final recall gap is at most 0.08.
 - Stale or forbidden source hit rate is at most 0.02.
 - p95 retrieval latency and cost do not regress by more than 10 percent versus baseline.
 
@@ -69,9 +72,9 @@ Score it with deterministic checks first and LLM judges only for semantic qualit
 
 Ship criteria:
 
-- Faithfulness or groundedness is at least 0.95 on holdout.
-- Answer relevance is at least 0.90 on holdout.
-- Answer correctness is at least 0.85 on human-labeled holdout.
+- Faithfulness or groundedness is at least 0.95 on final cases.
+- Answer relevance is at least 0.90 on final cases.
+- Answer correctness is at least 0.85 on human-labeled final cases.
 - Citation support is at least 0.95 for claims that cite sources.
 - Unsupported-answer rate on unanswerable questions is at most 0.05.
 
@@ -101,8 +104,8 @@ Ship criteria:
 ### Phase 4: Production Loop
 
 Run the same eval pack on every retrieval or prompt change.
-Keep train/dev/holdout isolated.
-Never tune on holdout.
+Keep train, selection, and final data isolated.
+Never tune on final data.
 
 Ship criteria:
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tangle-network/agent-knowledge",
-  "version": "4.1.0",
-  "description": "Source-grounded, eval-gated knowledge growth primitives for agents.",
+  "version": "5.0.0",
+  "description": "Build, search, evaluate, and improve source-backed knowledge bases.",
   "homepage": "https://github.com/tangle-network/agent-knowledge#readme",
   "repository": {
     "type": "git",
@@ -51,6 +51,7 @@
   "files": [
     "dist",
     "docs",
+    "skills",
     "AGENTS.md",
     "CHANGELOG.md",
     "README.md"
@@ -67,11 +68,13 @@
     "typecheck": "tsc --noEmit",
     "lint": "biome check src tests",
     "format": "biome format --write src tests",
-    "verify:package": "node scripts/verify-package.mjs"
+    "check:skills": "node scripts/check-skills.mjs",
+    "verify:package": "pnpm run check:skills && node scripts/verify-package.mjs",
+    "verify:official-optimizers": "node scripts/verify-official-optimizers.mjs"
   },
   "dependencies": {
-    "@tangle-network/agent-eval": "^0.122.8",
-    "@tangle-network/agent-interface": "^0.31.0",
+    "@tangle-network/agent-eval": "0.126.5",
+    "@tangle-network/agent-interface": "^0.32.0",
     "proper-lockfile": "4.1.2",
     "zod": "^4.4.3"
   },

package/skills/build-with-agent-knowledge/SKILL.md

@@ -0,0 +1,97 @@
+---
+name: build-with-agent-knowledge
+description: Build, evaluate, and improve source-backed knowledge, retrieval, and memory systems.
+---
+
+# Build With Agent Knowledge
+
+Use this when a product needs a knowledge base, retrieval system, RAG improvement process, or agent memory provider.
+Read the installed package README, exports, types, and nearest tests before choosing an API.
+Do not copy signatures from this skill.
+
+## Choose The Job
+
+| Product need | Package capability |
+|---|---|
+| Start a source-backed Markdown knowledge base | File knowledge base and source registry |
+| Search an existing package knowledge base | File search provider or a product search adapter |
+| Improve knowledge without editing live files | Isolated knowledge candidates |
+| Tune retrieval on labeled questions | Retrieval improvement loop |
+| Diagnose and repair retrieval, sources, pages, and answers together | RAG knowledge improvement loop |
+| Compare memory systems | Memory adapter and experiment APIs |
+| Run retrieval, answer, knowledge, or memory cases | Knowledge benchmark APIs |
+| Let agents research or edit candidates | Runtime knowledge integration |
+
+Use the narrowest capability that solves the product problem.
+Do not add an agent loop when deterministic ingestion or indexing is enough.
+
+## Define Truth And Success
+
+Record:
+
+- the user task the knowledge should improve;
+- authoritative and disallowed sources;
+- tenant, user, agent, and sharing scope;
+- freshness and deletion requirements;
+- the current retrieval, answer, or memory baseline;
+- objective checks, semantic checks, cost, and latency limits;
+- who may approve and apply a candidate.
+
+Use independent labels and source evidence.
+The agent's current answer is not a gold answer.
+
+## Keep The Boundary Clean
+
+`agent-knowledge` owns source records, indexes, retrieval tests, memory contracts, isolated candidates, and exact promotion.
+It does not own model choice, prompts, browsing, agent scheduling, product authorization, or product storage transactions.
+
+Supply callbacks for research, retrieval, answer generation, and scoring.
+Use `@tangle-network/agent-runtime/knowledge` when those callbacks should run agents.
+Use existing vector, graph, search, and memory systems through adapters instead of rebuilding their databases here.
+
+## Build The Smallest Complete Path
+
+1. Ingest one real source with provenance and tenant scope.
+2. Build or connect the index used by the product.
+3. Run one representative query or memory sequence through the production path.
+4. Capture retrieved items, final answer or action, citations, errors, tokens, cost, and latency.
+5. Prove a known good case passes and a realistic unsupported or missed case fails.
+6. Add only the missing improvement step: retrieval search, source acquisition, page update, answer repair, or memory policy.
+7. Write changes to an isolated candidate with a stable run identity.
+8. Compare baseline and candidate on the same development cases, then on unseen cases.
+9. Apply only an approved candidate whose base identity is still current.
+
+Use separate run IDs for parallel branches and the same run ID to resume interrupted work.
+Reject stale promotion rather than replacing newer knowledge.
+
+## Evaluate The Right Layer
+
+| Layer | Minimum evidence |
+|---|---|
+| Retrieval | Labeled relevant items, ranking measures, misses, latency, and cost |
+| Answer | Claim support, relevance, citation correctness, abstention, and final text |
+| Knowledge base | Source coverage, provenance, freshness, structure, conflicts, and validation findings |
+| Memory | Multi-turn task outcome, correct recall, harmful recall, isolation, writes, latency, and cost |
+
+Report service and measurement failures separately from product failures.
+Keep candidate-generation cases separate from the final decision set.
+Bundled benchmark samples prove adapter wiring only; use complete external datasets for benchmark claims.
+
+## Completion
+
+One customer-like path must prove:
+
+```text
+source or memory event -> production retrieval -> observable answer or action
+-> isolated candidate -> baseline comparison -> unseen comparison
+-> approved promotion or correctly rejected change -> reproducible rerun
+```
+
+Report installed versions, exact imports, provider adapters, scope policy, case counts, baseline and candidate results, cost, latency, candidate identity, promotion result, and artifact paths.
+
+## Then consider
+
+- `eval-engineering` when new production-derived cases are needed.
+- `build-with-agent-runtime` when agents should research, edit, or compare candidates.
+- `agent-eval-adoption` when the product needs shared comparison and release records.
+- `harden` when changing tenant isolation, source trust, deletion, or promotion authority.