
Mostly Isolated Is a Breach with a Delay
For a legal-tech startup I had to guarantee that only authorized members of a tenant could ever touch its documents. RAG doesn't change that problem — it adds a retrieval layer that makes a soft boundary leak silently. Here is why tenant isolation has to be a hard pre-filter at the index, not a ranking signal, and why it must fail closed.


