Enterprise RAG: architecture, access control and evaluation
Design traceable RAG with ingestion, revisions, authorisation, retrieval, context and citations. A security example and reproducible offline demonstration.
Technical guides
Retrieval, context, memory and tool execution require distinct contracts. Each guide connects a design choice to data, permissions and a possible check. Examples are educational; executed observations concern the published demonstration.
Design traceable RAG with ingestion, revisions, authorisation, retrieval, context and citations. A security example and reproducible offline demonstration.
Choose RAG retrieval for security documents: exact identifiers, lexical and vector search, rank fusion, reranking and evidence-level evaluation.
Assess GraphRAG for security knowledge: local and global questions, relationship provenance, indexing costs, source changes and customer isolation.
Organise AI-agent context with token budgets, task state, tool outputs, evidence references and compaction. A security example and restart checks.
Design AI-agent memory with task state, facts, provenance, contradictions, expiry and deletion. Security checks and research references.
Design verifiable multi-agent systems with task contracts, typed results, evidence, permissions, idempotency, budgets and recovery. A security workflow.
Assess RAG security across hostile documents, persistent memory, permissions, caches and tools. Defensive test cases with expected evidence.
Build cyber-agent evaluations with scope, ground truth, precision, recall, abstention, unwanted effects and reproducible comparisons.
The Python program executes 10 deterministic cases over fictional documents: permissions, organisation, revision, expiry and abstention. The recorded output reports 10 cases matching expectations. No model, embedding or network service is involved.
These results check the demonstration’s rules; they do not measure an AI agent’s resistance to attacks, generated-answer quality or a commercial product. Identity and metadata come from the fixture.
python rag_demo.pyThis selection of press and specialist publications identifies topics discussed in the US, Russian-language community and China. Technical claims in the guides reference original papers and documentation. Company blogs and research coverage retain their declared source status.
Prepare HTTP exchanges, IOCs and evidence in the browser