Permission-aware RAG: access control enforced inside the retrieval query, not after it. 56 tests plus a gold-set eval that fails CI on any leak. Delete the ACL predicate and leak rate goes 0% to 81.8% while recall stays at 100%.

access-control fastapi llm pgvector postgres python rag
2 Open Issues Need Help Last updated: Aug 5, 2026

Open Issues Need Help

View All on GitHub
good first issue

Permission-aware RAG: access control enforced inside the retrieval query, not after it. 56 tests plus a gold-set eval that fails CI on any leak. Delete the ACL predicate and leak rate goes 0% to 81.8% while recall stays at 100%.

Python
#access-control#fastapi#llm#pgvector#postgres#python#rag
good first issue

Permission-aware RAG: access control enforced inside the retrieval query, not after it. 56 tests plus a gold-set eval that fails CI on any leak. Delete the ACL predicate and leak rate goes 0% to 81.8% while recall stays at 100%.

Python
#access-control#fastapi#llm#pgvector#postgres#python#rag