RAG over-retrieval / entitlement-failure register
Public register of incidents in which an AI assistant, agent, or RAG system surfaced content a principal was not entitled to see, or amplified access.
October 1, 2026·10 min read
rag
6 posts
Microsoft Purview Can Govern Data. Your Copilot Still Needs Authorization at Retrieval
Purview classifies, labels, and governs your data estate. It does not decide, at query time, whether a user may retrieve a document from AI you build.
July 21, 2026·5 min read
Pre-Retrieval vs Post-Retrieval Authorization
A RAG pipeline can enforce access inside the vector query or in the app after results return. Each has a distinct failure mode. Here is what breaks.
June 21, 2026·7 min read
How to Enforce Document-Level Permissions in Enterprise RAG
Embeddings throw away the permissions your source systems already track. Here is the recipe to carry document-level permissions into a RAG pipeline.
June 20, 2026·8 min read
Adding Gateco to a LangChain or LlamaIndex RAG Pipeline
Gateco is not a RAG framework. It is the authorization layer you insert at the retrieval step of LangChain or LlamaIndex. Here is where it goes, and why.
June 19, 2026·6 min read
The RAG Security Gap: Similarity Is Not Authorization
Vector databases retrieve by embedding similarity. They don't know who's asking or check permissions. That is the RAG security gap, and it is wide.
March 10, 2025·6 min read