Reports

Production RAG/Sep 6, 2026/7 min read

Tenant isolation for multi-tenant RAG: ACLs that survive multi-hop retrieval

Chunk filters applied once still leak across hops and summaries

• Name the post-demo failure mode before adding autonomy.
• Encode controls as contracts: tools, ACLs, evals, and approvals.
• Measure task success and incident reconstructability, not only latency.