Tagged “security”
-
Permissions at generation time
Retrieval can surface a document the asker is not allowed to read, and the answer will summarise it. Where access control has to live.
-
Prompt injection in retrieved documents
Retrieved content goes into your prompt as instructions the model might follow. Why RAG makes this worse, and what actually reduces the risk.