Permission-Aware RAG: Making Your Internal AI Assistant Respect Document Access
How to make retrieval respect who can see what: ACL metadata, Entra ID and Cognito identity, Azure AI Search and Bedrock filters, Salesforce, audits and tests.
Writing Tagged
4 articles
3 articles
How to make retrieval respect who can see what: ACL metadata, Entra ID and Cognito identity, Azure AI Search and Bedrock filters, Salesforce, audits and tests.
Prompt injection, tool poisoning and MCP risks explained from an IT security angle, with practical controls to keep AI agents safe.
What agentic RAG adds to basic retrieval, when you actually need it, and lessons from building an internal company knowledge assistant.
1 article
How MCP servers work in 2026: tools and resources, stdio vs Streamable HTTP, OAuth-based auth, the stateless spec, and where the protocol still falls short.
No articles on this page match that.
The filter only looks at what is listed here. Search the whole site instead:
Search everything