RAG
Retrieval-augmented generation
An application retrieves documents, often by vector similarity, and adds them to a model’s context. Retrieval must enforce the user’s access rights before content reaches the model.
Covered in
Keep retrieval inside the user’s data boundary
Carry document permissions through ingestion, retrieval, caching and citations so a model never receives another tenant’s records.
Defend agent memory and context against poisoning (OWASP ASI06)
OWASP ASI06 Memory & Context Poisoning: how an instruction or false fact saved once in agent memory, conversation summaries or a retrieval store steers later sessions, users and agents, and the write, scope, provenance, expiry and recovery controls that contain it.
Practice: RAG access control lab: Stop a retriever from returning another tenant’s documents · Local project: Enforce retrieval and tool boundaries across crashes