LLM exposure levels
An LLM exposure level controls the detail RebelCore Agent may return from a governed dataset. It applies to tabular values and to source documents associated with that dataset.
Choose the level in Add Data. For structured or mixed modules, review or adjust it again in Module Builder before building.
Compare the levels
| Level | Suitable output | Does not permit |
|---|---|---|
| Full | Exact authorised values, records, file details, aggregates, summaries, and advice. | Fabricated or unsupported claims. |
| Limited | Trends, categories, aggregates, summaries, data-quality observations, and safe document analysis. | Raw rows or enough record/file detail to reconstruct sensitive source material. |
| Advisory only | Qualitative guidance, classifications, risks, recommendations, and next steps. | Raw records, exact dataset values, counts, percentages, averages, ranges, or source-text reconstruction. |
Exposure never bypasses role permissions, project access, personal-information masking, or audit controls.
One policy across a module
- A tabular-only module applies its exposure to structured-data answers.
- A file-only module applies it to associated document answers.
- A mixed module applies the same value to both capabilities.
If file retrieval reveals a stricter applicable dataset policy, the final answer is tightened. Exposure can become more restrictive during a turn; it cannot be relaxed by a tool result or by the model.
Most restrictive wins
When several modules or datasets apply, RebelCore chooses the most restrictive level:
| Selection | Effective level |
|---|---|
| Full only | Full |
| Full and Limited | Limited |
| Any applicable Advisory-only source | Advisory only |
The project form, Agent dataset selector, and response badge show the effective level.
File access and exposure
Project access can allow a user to question a dataset-associated file without creating a personal share. The file retains the dataset’s exposure semantics.
Dataset questioning and original-file download are separate permissions. Access to ask questions does not automatically grant download.
Agent also distinguishes personal files from selected datasets:
- User files (personal) controls owned and directly shared working files.
- Selected dataset-associated files remain available when that personal toggle is off.
- Disabling all file content blocks file search for the request.
Exposure and masking
- Exposure controls how much governed source detail an answer may return.
- Mask to AI controls whether recognised personal identifiers are replaced before AI processing.
- Mask on interface controls whether authorised personal information is shown in chat.
A Full dataset can still require masking. An Advisory-only dataset remains Advisory-only when masking is disabled.
Choosing a level
Consider whether users need exact records, whether summaries are sufficient, and what contractual or regulatory controls apply. Limited is the default. When uncertain, start with the more restrictive option.