Per-recipient release, running.
Pick a role and a question. Each role is shown what it is cleared for, the boundary on what it may pass down, and the version each lower level is cleared to receive.
Select a role
Select a question
Resolving clearance…
Resolved server-side. Only the authorised tier crosses the wire — check the network tab.
Reading the four roles
Gets the public version where one exists, and nothing else: no release line, no guidance, and no signal that anything else exists. Where there is no public version, she simply sees that no information is available.
Gets the newsroom version, a release line naming the public as ineligible, and the public wording to use if asked. Where no public version exists, an explicit instruction to say nothing.
Gets the desk version, which confirms the source is verified without identifying them, a release line naming newsroom staff and the public, and the versions cleared for each.
Gets everything, including the source's identity. Only Sam can grant anyone else access, so nobody, including the newsroom's own system administrators, our company, or any outside party, can reach it without Sam's consent.