Provenance links on notes and tasks, and an SI's narrow-only label fields — LEARNED_FROM from SIs only, DERIVED_FROM from nobody (RELATION_NOT_ALLOWED), one row per record with the stronger relation, a replace that keeps provenance, the SI's run from X-Kamo-Run-Id; SIs may raise sensitivity and carry a source's Confidential marker (LABEL_WIDENS otherwise), people get USE_RELEASE (KamoCollab CP05 Task 17)