AI Orchestrators vs Gateco: Workflow vs Retrieval Control
An orchestrator decides which agents and steps run. Gateco decides what an agent can retrieve. Different layers, and retrieval is where RAG leaks.
June 18, 2026·6 min read
comparison
6 posts
Cerbos vs Gateco: Generic Policy Engine vs Vector-DB-Native
Cerbos is a generic authorization engine. Gateco is a retrieval-specific security layer for RAG. They solve different problems, and can be used together.
April 28, 2026·7 min read
Why pgvector RLS Breaks Past Ten Tenants
pgvector Row Level Security is the most common DIY RAG auth pattern. When it works, when it breaks, and the five triggers that make teams outgrow it.
April 25, 2026·6 min read
Azure AI Search vs. Vector Databases for RAG
Azure AI Search is a managed search platform; pgvector, Pinecone, and Qdrant are retrieval primitives. The choice shapes your RAG architecture and governance.
April 17, 2026·8 min read
Why Metadata Filters Aren't Enough for RAG Security
Metadata filters are the most common approach to RAG access control, and fundamentally insufficient. Why they can't replace a dedicated permission layer.
March 17, 2025·7 min read
Authorization Approaches for RAG Systems: A Comparison
Four approaches to RAG authorization compared: no auth, metadata filters, app-layer RBAC, and a dedicated permission layer. Pros, cons, and when each fits.
March 14, 2025·8 min read