RAG security: the retrieved document is now your attack surface

Retrieval-augmented generation feeds untrusted documents straight into your model — an injection vector, a data-leak path, and a poisoning target. How to secure a RAG pipeline properly.