# PAT-0140 — Boundary Leakage

## Ontology Metadata

Code: PAT-0140
Version: PAT-0140@0.1.0
Ontology release: 0.1.0
Updated: 2026-05-10T00:00:00Z
Canonical URL: /workbench/patterns/boundary-leakage/

## Summary

A structural condition where effects, permissions, state, data, or authority cross a declared boundary without an authorized exception.

## Primary Lenses

- LEN-0220 — Isolation Boundary Lens
  - URL: /workbench/lenses/isolation-boundary-lens/
  - Summary: Evaluates whether structural constraints, effects, and regions remain contained within declared boundaries.
- LEN-0250 — Propagation Lens
  - URL: /workbench/lenses/propagation-lens/
  - Summary: Traces how structural declarations, effects, or state changes propagate across boundaries or stages.

## Secondary Lenses

- LEN-0120 — Boundary Compliance Lens
  - URL: /workbench/lenses/boundary-compliance-lens/
  - Summary: Evaluates observed structure against declared boundary posture, including allow, block, and exception rules.

## Primary Issue Matches

- ISS-0113 — Agent Modified Unrelated State
  - URL: /workbench/issues/agent-modified-unrelated-state/
  - Summary: An agent changes state outside the requested task, target, file, record, workflow, or authorized scope.
- ISS-0044 — AI Uses External Information When Forbidden
  - URL: /workbench/issues/ai-uses-external-information-when-forbidden/
  - Summary: The AI uses outside knowledge, sources, tools, memory, or assumptions after the task forbids external information or limits the allowed source set.
- ISS-0032 — Context Leaks Between Tasks
  - URL: /workbench/issues/context-leaks-between-tasks/
  - Summary: Context, assumptions, constraints, examples, files, or decisions from one task affect another task where they should not apply.
- ISS-0048 — File-Bounded Task Uses Outside Content
  - URL: /workbench/issues/file-bounded-task-uses-outside-content/
  - Summary: The AI is asked to work only from a specific file or document but uses content, assumptions, or sources outside that file.
- ISS-0062 — Retrieval Exceeds Evidence Limit
  - URL: /workbench/issues/retrieval-exceeds-evidence-limit/
  - Summary: The AI retrieves, uses, cites, or considers more evidence than the task permits or more than the review surface can support.
- ISS-0051 — Review Outcome Changes Unrelated Environment
  - URL: /workbench/issues/review-outcome-changes-unrelated-environment/
  - Summary: A review result, approval, rejection, or classification changes state outside the environment, case, file, or workflow it was meant to govern.

## Supporting Issue Matches

- ISS-0046 — Action Changed Something Else Too
  - URL: /workbench/issues/action-changed-something-else-too/
  - Summary: An AI or agent action makes the requested change but also changes another object, field, file, state, rule, or workflow element that was not supposed to change.
- ISS-0109 — AI Memory Has No Governance
  - URL: /workbench/issues/ai-memory-has-no-governance/
  - Summary: Saved or persistent AI memory affects output without clear rules for ownership, scope, review, update, expiry, or removal.
- ISS-0114 — AI Memory Updated Without Asking
  - URL: /workbench/issues/ai-memory-updated-without-asking/
  - Summary: AI memory, saved context, preference, or durable state is updated without the user clearly asking for or approving that update.
- ISS-0045 — AI Touches Unrelated Scope
  - URL: /workbench/issues/ai-touches-unrelated-scope/
  - Summary: The AI affects, edits, analyzes, changes, or reasons over material outside the scope of the requested task.
- ISS-0039 — Hidden Rule Overrides Visible Instruction
  - URL: /workbench/issues/hidden-rule-overrides-visible-instruction/
  - Summary: A hidden, upstream, system, policy, tool, or product rule changes or overrides the visible instruction the user expects the AI to follow.
- ISS-0101 — Local Exception Grows Into Policy
  - URL: /workbench/issues/local-exception-grows-into-policy/
  - Summary: A local exception, special case, or one-off allowance begins to function like a general policy.
- ISS-0096 — Local Rule Spreads to Broader Cases
  - URL: /workbench/issues/local-rule-spreads-to-broader-cases/
  - Summary: A rule intended for one local case, file, context, user, workflow, or exception begins affecting broader cases.
- ISS-0049 — Policy Exception Spreads Too Far
  - URL: /workbench/issues/policy-exception-spreads-too-far/
  - Summary: A narrow policy exception, allowance, or special case spreads beyond its intended scope and begins governing broader cases.
- ISS-0076 — Prompt Does Not Say What to Exclude
  - URL: /workbench/issues/prompt-does-not-say-what-to-exclude/
  - Summary: The prompt declares what to include but does not declare what should be excluded, allowing unwanted scope, sources, content, or actions into the result.
- ISS-0112 — Routing Overrides Task Intent
  - URL: /workbench/issues/routing-overrides-task-intent/
  - Summary: Routing, mode selection, agent behavior, or workflow classification sends the task down a path that overrides what the user was trying to accomplish.