Agent can look up actual records via the Command Center, but masked column values
are redacted server-side (never reach the model). System prompt forbids revealing,
guessing or reconstructing masked values and explains how to disable masking.
- /catalog/sync ingests OpenMetadata tables/columns/PII tags + Command Center
PII catalog, data-flow lineage and movements into a 'catalog' Chroma collection.
- /agent runs a model-agnostic JSON-action tool loop (search_catalog, get_pii,
get_cdc, list_movements, propose_movement) and streams the final answer over SSE.
- propose_movement files an approval in the Command Center (human gate) and never
executes directly.
mo