AI SECURITY · Advanced · FICTIONAL ENVIRONMENT
Cross-Tenant RAG Exposure
A user receives a citation from another business unit's restricted document set.
MISSIONStop unauthorized retrieval and determine how the boundary failed.
MISSION PROGRESS
0 / 4
PHASE 1
Open evidence sources. Build your incident picture.Investigate
INVESTIGATION JOURNAL
Outputs appear here as you inspect systems.Observed evidence
Evidence you inspect will appear here.
PHASE 2
This is not scored until you choose to check it.Form a root-cause hypothesis
PHASE 3
Controls unlock after an evidence-consistent hypothesis.Apply a mitigation
PHASE 4
Do not declare victory before verification.Verify recovery
Debrief
- Authorization must occur before sensitive context reaches the model.
- Vector relevance is not permission.
- Derived indexes must preserve source-system access metadata.