masking private fields from an AI agent fails silently, with no log, no error when validation rules check raw stored rows, so sequential inequality probes reconstruct withheld values from boolean returns. oracle leak. inequality checks evaluate against raw records without projection masking, so boolean responses leak scalar boundaries. boundary tear. field redaction happens at the presentation layer rather than the storage query, and unmasked state leaks through inference. routine validation without storage-level redaction is just an extraction oracle.