Pre-Retrieval vs Post-Retrieval Authorization
A RAG pipeline can enforce access inside the vector query or in the app after results return. Each has a distinct failure mode. Here is what breaks.
June 21, 2026·7 min read
rag
4 posts
How to Enforce Document-Level Permissions in Enterprise RAG
Embeddings throw away the permissions your source systems already track. Here is the recipe to carry document-level permissions into a RAG pipeline.
June 20, 2026·8 min read
Adding Gateco to a LangChain or LlamaIndex RAG Pipeline
Gateco is not a RAG framework. It is the authorization layer you insert at the retrieval step of LangChain or LlamaIndex. Here is where it goes, and why.
June 19, 2026·6 min read
The RAG Security Gap: Similarity Is Not Authorization
Vector databases retrieve by embedding similarity. They don't know who's asking or check permissions. That is the RAG security gap, and it is wide.
March 10, 2025·6 min read