Retrieval-augmented generation (RAG) supplies a large language model with externally retrieved documents or records so responses are grounded in enterprise data. section 1.3.5 section 17.4
Financial records assistant
An assistant for financial analysts may retrieve organization-specific financial records. Each user should receive answers consistent only with records they are authorized to see. section 1.3.5
A safe RAG architecture separates retrieval from generation:
- Determine which documents or records the user may access. section 17.4
- Retrieve only authorized data from enterprise sources. section 17.4
- Place the authorized results into the model’s context for response generation. section 17.4
Authorization must remain with a deterministic, explainable, auditable policy engine rather than the language model. Authorizing before retrieval prevents unauthorized data from entering the prompt and avoids dependence on prompt discipline or model behavior. section 17.0 section 17.4































