rag

5 posts

Microsoft Purview Can Govern Data. Your Copilot Still Needs Authorization at Retrieval

Purview classifies, labels, and governs your data estate. It does not decide, at query time, whether a specific user may retrieve a specific document from the AI your team is building. That gap has a name: retrieval authorization.

July 21, 2026·5 min read

reference architecture architecture security rag engineering

Pre-Retrieval vs Post-Retrieval Authorization

A RAG pipeline can enforce access inside the vector query or in the app after results return. Each has a distinct failure mode. Here is what breaks.

June 21, 2026·7 min read

reference architecture rag security engineering

How to Enforce Document-Level Permissions in Enterprise RAG

Embeddings throw away the permissions your source systems already track. Here is the recipe to carry document-level permissions into a RAG pipeline.

June 20, 2026·8 min read

reference architecture rag engineering product

Adding Gateco to a LangChain or LlamaIndex RAG Pipeline

Gateco is not a RAG framework. It is the authorization layer you insert at the retrieval step of LangChain or LlamaIndex. Here is where it goes, and why.

June 19, 2026·6 min read

security rag architecture

The RAG Security Gap: Similarity Is Not Authorization

Vector databases retrieve by embedding similarity. They don't know who's asking or check permissions. That is the RAG security gap, and it is wide.

March 10, 2025·6 min read

← All posts