data leakage through rag is the quiet risk nobody plans for

your retrieval can surface a document the current user should never see. permissions have to live at retrieval time, not just at the ui. learned this in an audit.