Classify Before You Embed: The Access Control Problem RAG Pipelines Skip

A practical, engineering-level walkthrough of why document classification and compartmentalised permissioning have to happen before any model gets retrieval access to an organisation's archive, with the concrete confused-deputy failure mode that shows up when teams skip straight to indexing.