2 docs tagged with "tenant-isolation"

Production guide for RAG tenant isolation on Kubernetes, covering ingestion metadata, retrieval filters, prompt assembly, evaluation, and unauthorized-document tests.

Field note for RAG on Kubernetes failures where retrieval returns documents outside the user's tenant or authorization boundary.