Section 6
Security
Authorisation is enforced inside the retrieval query using PostgreSQL row-level security, not applied to results afterwards.
Tenant partitioning is structural, so cross-tenant retrieval is not merely unlikely. The application role is neither superuser nor exempt, and every table carrying a policy forces row-level security on its owner as well.
5.1 Red-team results
In progress — Phase 3
Cross-tenant retrieval attempts, role escalation, prompt injection through document content and through the query, citation forgery, and abstention bypass. Results publish including any attacks that succeed.
Waiting on the retrieval platform (Phase 2)
5.2 What will be reported
The pass rate as measured, including failures. A security section showing a perfect score with no failures shown is the least believable thing this site could publish, so failures are reported rather than quietly fixed before publication.
The suite is verified by deliberately introducing a row-level security bug and confirming it fails. A suite that has never failed has not been shown to work.