Expanded capabilities
- Park sanitized cross-tenant knowledge candidates for SUPER_ADMIN review
- Support review / revoke on platform candidates
- Expose posture + RECORD_ONLY pins for platform operators
- Never auto-push knowledge into tenant boundaries
- Complement Tenant ATLAS without mixing scopes
How they learn & improve
Global ATLAS only improves the park/review lane from SUPER_ADMIN decisions — approved parks still never auto-push to tenants.
- Accept sanitized candidates from learning/promotion paths.
- Wait for SUPER_ADMIN review or revoke.
- Leave tenant apply as a separate, explicit human act — never automatic.
How they work together
Global ATLAS is the platform park lot: LEARNING may propose, SUPER_ADMIN reviews, Tenant ATLAS stays local until an explicit apply path runs.
Practical benefits
- Cross-tenant ideas without leakageUseful patterns can be reviewed at platform scope without writing into customer tenants.
- Hard ban on auto-pushEven approved parks require a separate tenant apply — nothing silently lands in production knowledge.
- Revoke when wrongSUPER_ADMIN can revoke candidates; the park lot stays reversible.
Learning and improvement stay human-visible: candidates are RECORD_ONLY until an operator reviews and applies them. Sensitive sends, publishes, and approvals never run silently.