Citation UX fails when it treats all users the same. Permission-aware rendering must enforce access before snippet generation.

Expose citation confidence and source lineage, but hide restricted segments by default. Give clear error states when evidence exists but access is missing.

This pattern increases trust while protecting confidential records and role-based boundaries.