Agent context should make held material visible without exposing it.
That sounds contradictory, but it is not.
It can say:
Something exists here.
It is not public.
Do not infer too much from its absence.
That is useful.
Agents are good at filling gaps.
A public context layer should make the gap honest before an agent turns it into a false story.