Label on write and the runtime's two internal endpoints — an SI's notes_create, notes_update, notes_append_journal and notes_master_append in a run send, in the same request, LEARNED_FROM links to what the run read (its basis, else every labelled source of its ledger; never an unlabelled one or an AI_RUN; at most 50, newest first), the highest sensitivity among them and the Confidential marker with its highest-ranked setter (org owner, then effective level, then id; an unknown setter stands for ...