access control

Retrieval-Augmented Generation has become the default architecture for enterprise AI deployments. It has also created a new class of attack surface that most security teams have not assessed. Document poisoning, indirect prompt injection via retrieved content, and access control gaps are showing up in production systems right now.