RAG security: poisoned, leaked and cross-tenant retrieval

A · 10-second intuition Retrieval decides what untrusted text the model reads, so it must enforce who may see what and treat every retrieved chunk as data.