Maintaining RAG permission boundaries

Review access and leakage boundaries in retrieval-augmented generation.

Authorization filter

A rule that limits search results to resources a principal is allowed to access.

Metadata

Attributes such as owner, classification, or department attached to a document or fragment.

Citation protection

Restricting evidence references so they do not reveal content outside a reader's access.

Information leakage

Unintended disclosure through answers, citations, errors, logs, or metadata.