BY-G3 · Protective Markings · Foundation · 40 min

The Thursday-night package

A governed response in the ai.heart canon · printable worksheet + reveal · 15 min

1 · The situation

Late on a Thursday your manager asks you to send a package to three colleagues before a Friday morning meeting. The body of your email is two routine lines. Attached are the draft agenda, which is unremarkable, and a spreadsheet you did not write, received last week from a partner agency and already marked PROTECTED. Your second attachment is your own one-page summary, which paraphrases several figures out of that spreadsheet. One of the three recipients may not strictly need it.

2 · Your decision

Take a position — or defer with reasons — before you reveal the governed response.

A · Mark the whole email PROTECTED — type the marking by hand into the subject line, and send it to all three recipients as your manager asked.

B · Send the agenda and your summary now — at the level you judge those two documents honestly warrant, and forward the PROTECTED spreadsheet separately.

C · Send nothing tonight — confirm with the spreadsheet's originator whether your summary carries the PROTECTED level forward, and confirm the third recipient's need.

D · Mark the whole email PROTECTED — but only to the two recipients in your own division, telling your manager the third will follow once confirmed.

Your decision and one-line reason:

AI governanceThe mail client's AI assistant now 'usually adds' the marking and even auto-completes subject lines. The tool's silence — or its guess — is never a verdict; the officer certifies the marking before release.

3 · Governed response — reveal after deciding

AIHEART · NESTED CONTAINMENT GEOMETRY · GOVERNED RESPONSE BLOCK

Input under review: The Thursday-night email package — routine body, PROTECTED partner spreadsheet, your one-page summary paraphrasing its figures, three recipients.

Classification of the event: An output pending a marking decision at send time. The whole message is marked to its highest part; the release is the sender's certification — and the partner's marking is not yours to change.

L	Layer	Check on this case
L1 · Input validation	Attachments identified: agenda unremarkable; spreadsheet PROTECTED from the partner agency; your summary paraphrases several of its figures.	PASS
L2 · Context analysis	Mark to the highest sensitivity present — the summary carries the PROTECTED level forward because it paraphrases PROTECTED figures; the routine body does not lower it.	HOLD
L3 · Harm / loss	Under-marking exposes the paraphrased figures; over-marking buries real signals. The honest rung for the whole email is PROTECTED.	PASS
L4 · Equity weighting	No shortcut because it is late and the manager asked; the third recipient's need is checked before send — including whether the spreadsheet should go at all.	PASS
L5 · Coherence check	ISM-0270 (mark to the highest part), ISM-0271 (the tool never chooses the value), PSPF Req 67 (the email marking standard still applied), Req 58 (originator owns changes — never silently re-mark the partner's spreadsheet), and recipient standing all verified.	VERIFY
L6 · Integration gate	Cross-layer consistent: subject form, header, attachment note and recipients all carry the same decision.	PASS
L7 · Audit generation	The send is logged with its marking and recipients; any follow-up with the partner originator is recorded.	PASS
L8 · Output certification	The sender certifies the marking before release — the tool suggests, the person signs.	PASS

OVERALL VERDICT · HOLD → VERIFY → CERTIFIED RELEASE

HOLD → CERTIFIED RELEASE — one honest send at PROTECTED, recipients checked, partner's marking untouched.

PERMISSION GATE · NODE 9 — RELEASE AUTHORITY
The sender holds marking authority for the message they assemble. The partner agency's originator holds authority for the spreadsheet's marking — you never re-mark someone else's document, and you confirm rather than guess.

[00:00:00.000] L1 attachments verified · agenda unmarked · spreadsheet PROTECTED · summary paraphrases figures

[00:00:01.000] L2 highest part applied · summary carries PROTECTED forward

[00:00:02.000] L3 harm weighed · exposure vs burial · honest rung is PROTECTED

[00:00:03.000] L4 equity held · no late-night shortcut · recipient need checked

[00:00:04.000] L5 controls checked · ISM-0270/0271 + Req 67 + Req 58 · partner's marking untouched

[00:00:05.000] L6 integration passed · subject + header + attachment note agree

[00:00:06.000] L7 audit appended · send + marking + recipients logged

[00:00:07.000] L8 sender certifies · EXIT = CERTIFIED ONLY

Governed answer

Mark the whole email PROTECTED, type the marking by hand into the subject line, match it in the X-Protective-Marking header, and send to the recipients whose need is confirmed — confirming the third recipient's standing (and whether the spreadsheet should reach them at all) before sending. Your one-page summary paraphrasing the PROTECTED spreadsheet carries the level forward; you do not re-mark the partner's spreadsheet, whose marking belongs to its originator (Req 58). The tool may suggest — you certify the release.

Cited controls: ISM-0270 · ISM-0271 · PSPF Req 67 · Req 58 · Req 60

Provenance. This governed response was drafted with AI assistance and gated against the cited source documents. It is a training artefact of the BestYou·AI scenario layer and carries no endorsement; the governed verification pipeline status of the source course (BY-G3) applies as stated on its course page. Nothing here is legal advice.

BestYou·AI · Scenario Lab · Standalone governed response — BY-G3 · Practice material — builds capability toward the frameworks cited on the course page; it does not discharge or evidence compliance.