PRODUCTION SCENARIO
Two customers share one support assistant over a common index. A regression test sends customer A a query that closely matches a private document belonging to customer B.
What must the test verify?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: That B's document never enters the retrieved context assembled for A
Authorization trims the result set before the context is built, so the assertion belongs at context assembly, where a filter on the caller's identity excludes documents that do not match. A similarity score is a relevance signal that happens to be low today, not a boundary. Checking the answer for B's strings passes on any paraphrase, and by then the document was already retrieved. A refusal makes the model the access control.