How do you adjudicate between legal requirements for st...

While hard filters can over-restrict and hurt recall, an access-control predicate cannot be safely converted to a soft/scored version. A scored filter assigns a non-zero probability to a leak, which is unacceptable at scale. Instead, the recall problem should be solved by making permission fields mandatory at ingest, widening the candidate pool, or partitioning data by tenant so that filters become shard choices rather than risky predicates.