A knowledge assistant should only retrieve material that the person asking is allowed to read.

Once restricted text reaches the model, a polite instruction not to reveal it is a weaker boundary.

Check identity and permitted scope before retrieval. Apply the same rule to snippets, citations, previews, exports, and background work.

Use synthetic accounts with different roles. Test direct questions, paraphrases, restricted source links, and access that was just removed.

Give permission maintenance a named owner. Demonstrate both an allowed query and a denied query, rather than treating an administrator's successful answer as proof.

Original article explainer. AI-assisted conceptual illustration and neural narration; original synthesized music. Not a human recording or customer result.