An AI chatbot built on retrieval-augmented generation (RAG), where it answers by pulling from your own knowledge sources, is only as safe as the content it is allowed to retrieve. The failure happens when retrieval runs with no notion of who is asking: the agent searches the
