Per-query authorization does not compose across an adaptive agent's pages, retries, rewrites, and delegated subtasks, and row or query counters are order-dependent. FactGate is a release layer for immutable reporting publications that turns one approved task into a cumulative contract: three set-valued budgets over declared identities (result, positive-output dependency, and outcome facts) shared by the root task and descendants. Exact set novelty against the root-family ledger is settled atomically on one PostgreSQL snapshot before any result becomes retrievable. The guarantee is bounded release: within one root family and publication epoch, at most the approved number of distinct declared facts of each kind becomes available, whatever the admitted sequence; inference from answered or refused predicates is not bounded. Accounting is exact under declared rules over a closed fragment (connected equijoins, grouping, bounded unions, nested Views, derived-cell arithmetic) that admits 55% of 40 held-out LLM-written statements (70% of a development set adapted during construction). Ordinals, bitmaps, and a Merkle-radix set keep novelty exact at 10^7 facts. A single-host campaign (9,393 samples) charges every scripted decomposition once, keeps an adaptive trace within its budgets, and costs 21.8-144.0x a direct query; settlement takes a median 163 ms against a million-fact history at zero overlap.

翻译：暂无翻译