Ask, don't open
My friend keeps a knowledge base. So do I.
He has spent years writing down what he knows: notes on a market, people, mistakes, numbers. Sometimes I need one answer from there. Not the whole base. One answer.
Today there are two ways to get it. I call him and wait until he has time. Or he shares the whole folder with me. The first is slow. The second is too much: the folder holds things that are not mine to see.
Agents give a third way. My agent asks his agent. His agent looks into his base, finds the answer and sends back only that. His base stays closed. I get what I asked for and nothing more.
The reverse matters just as much. When my agent asks, it must not open my base in return. A question is not a key.
For this to work, the rules can't live in a promise. They must live in the agent itself. Every agent that holds a knowledge base needs a protocol it can't skip:
- Who is asking. The agent checks the asker's entry in the book before it says a word.
- What they may ask. The owner decides which topics are open, and to whom.
- What goes out. An answer, not the notes. No raw files, nothing the owner marked private.
- What is kept. Every question and every answer goes into a log. The owner can read it and close the door.
- What comes back. Nothing. Asking never opens the asker's own base.
Then knowledge bases start to talk to each other. Not by copying. By asking, through agents that keep the rules.
Knowledge should travel as answers, not as files.