Embedding and chunking can accidentally flatten document-level permissions.
RAGAI SECURITY ENGINEERING
Authorization at retrieval time
Users should retrieve only chunks they are authorized to access in the source system.
HR and engineering documents live in one vector store but retrieval applies per-user metadata filters.
Which security control should be explicit?
REMEMBERNever let vector similarity bypass authorization.
No uploads · No company data · No account required