
ACL and multi-tenancy in RAG: filter permissions before retrieval, not after
Production RAG cannot leave authorization to the model. How to isolate tenants, apply access lists before retrieval, close hidden leak channels, and measure recall under tight filters.











