Permission metadata synchronisation and enforcement point

Where authorisation is actually evaluated for a search or retrieval index built continuously from external systems the platform does not own, and how permission metadata from those systems is kept current.