Authorization-Aware RAG

Enforcement happens when chunks are selected for the model. Filtering the finished answer is not the control.

One question

Can the scheduled radar inspection on RADAR-042 be deferred by 72 hours?

DEMO-SYNTH corpus. The same question is asked as three identities, in this order. Each retrieval is recorded before any answer is opened. No live North, IAM, or model is connected.

1. C. Bernard

Engineering Approvers · All classifications in the synthetic corpus

Can the scheduled radar inspection on RADAR-042 be deferred by 72 hours?

Retrieval audit

{"identity":"cleared","candidates":18,"authorized":18,"blocked":0,"inContext":18}

Authorized context

AUTH-RAG-CH-01UNRESTRICTED
Inspection window notice
DEMO-SYNTH Public maintenance bulletin MB-042
The public bulletin lists RADAR-042 for a scheduled inspection this week.
AUTH-RAG-CH-02UNRESTRICTED
Asset identity
DEMO-SYNTH Public maintenance bulletin MB-042
RADAR-042 is an active radar subsystem in the synthetic fleet list.
AUTH-RAG-CH-03UNRESTRICTED
Bulletin marking
DEMO-SYNTH Public maintenance bulletin MB-042
This bulletin is marked DEMO-SYNTH and contains no restricted engineering detail.
AUTH-RAG-CH-04UNRESTRICTED
Contact path
DEMO-SYNTH Public maintenance bulletin MB-042
Questions about the public schedule go to the maintenance desk named in the bulletin.
AUTH-RAG-CH-05UNRESTRICTED
No deferral decision
DEMO-SYNTH Public maintenance bulletin MB-042
The public bulletin does not authorize a deferral. It only announces the inspection.
AUTH-RAG-CH-06UNRESTRICTED
Synthetic corpus notice
DEMO-SYNTH Public maintenance bulletin MB-042
DEMO-SYNTH. This document is fictional demonstration material.
AUTH-RAG-CH-07PARTIAL
Baseline identity
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice of TB-RADAR-042. The document is marked DEMO-SYNTH.
AUTH-RAG-CH-08PARTIAL
Inspection scope
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice: the inspection covers the radar subsystem named in the public bulletin.
AUTH-RAG-CH-09PARTIAL
Telemetry pointer
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice: a telemetry record exists for RADAR-042. Values are not in this slice.
AUTH-RAG-CH-10PARTIAL
Deferral is a deviation
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice: moving the inspection is a maintenance deviation, not a routine schedule edit.
AUTH-RAG-CH-11PARTIAL
Slice boundary
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice ends here. Later slices of this same document are engineering-sensitive.
AUTH-RAG-CH-12RESTRICTED
Current revision
DEMO-SYNTH Technical Baseline TB-RADAR-042
Engineering-sensitive slice: the current approved revision is 2.3.
AUTH-RAG-CH-13RESTRICTED
Superseded revision
DEMO-SYNTH Technical Baseline TB-RADAR-042
Engineering-sensitive slice: revision 2.1 is superseded.
AUTH-RAG-CH-14RESTRICTED
Approver roster
DEMO-SYNTH Engineering authority register EAR-04
C. Bernard is the Authorized Engineering Approver for RADAR-042 deviations.
AUTH-RAG-CH-15RESTRICTED
Delegation limit
DEMO-SYNTH Engineering authority register EAR-04
The named approver may authorize deferrals up to 96 hours.
AUTH-RAG-CH-16RESTRICTED
Register scope
DEMO-SYNTH Engineering authority register EAR-04
This register applies only to the fictional asset RADAR-042.
AUTH-RAG-CH-17RESTRICTED
Approval binding
DEMO-SYNTH Engineering authority register EAR-04
An approval must name the asset, the 72-hour deferral, and revision 2.3.
AUTH-RAG-CH-18RESTRICTED
Register marking
DEMO-SYNTH Engineering authority register EAR-04
DEMO-SYNTH. This authority register is fictional demonstration material.

Blocked before model context

0 blocked. No chunks were excluded for this identity.

Scripted response

2. A. Morel

Maintenance Engineers · Unrestricted, plus the releasable slices of the partially restricted document

Can the scheduled radar inspection on RADAR-042 be deferred by 72 hours?

Retrieval audit

{"identity":"mid","candidates":18,"authorized":11,"blocked":7,"inContext":11}

Authorized context

AUTH-RAG-CH-01UNRESTRICTED
Inspection window notice
DEMO-SYNTH Public maintenance bulletin MB-042
The public bulletin lists RADAR-042 for a scheduled inspection this week.
AUTH-RAG-CH-02UNRESTRICTED
Asset identity
DEMO-SYNTH Public maintenance bulletin MB-042
RADAR-042 is an active radar subsystem in the synthetic fleet list.
AUTH-RAG-CH-03UNRESTRICTED
Bulletin marking
DEMO-SYNTH Public maintenance bulletin MB-042
This bulletin is marked DEMO-SYNTH and contains no restricted engineering detail.
AUTH-RAG-CH-04UNRESTRICTED
Contact path
DEMO-SYNTH Public maintenance bulletin MB-042
Questions about the public schedule go to the maintenance desk named in the bulletin.
AUTH-RAG-CH-05UNRESTRICTED
No deferral decision
DEMO-SYNTH Public maintenance bulletin MB-042
The public bulletin does not authorize a deferral. It only announces the inspection.
AUTH-RAG-CH-06UNRESTRICTED
Synthetic corpus notice
DEMO-SYNTH Public maintenance bulletin MB-042
DEMO-SYNTH. This document is fictional demonstration material.
AUTH-RAG-CH-07PARTIAL
Baseline identity
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice of TB-RADAR-042. The document is marked DEMO-SYNTH.
AUTH-RAG-CH-08PARTIAL
Inspection scope
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice: the inspection covers the radar subsystem named in the public bulletin.
AUTH-RAG-CH-09PARTIAL
Telemetry pointer
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice: a telemetry record exists for RADAR-042. Values are not in this slice.
AUTH-RAG-CH-10PARTIAL
Deferral is a deviation
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice: moving the inspection is a maintenance deviation, not a routine schedule edit.
AUTH-RAG-CH-11PARTIAL
Slice boundary
DEMO-SYNTH Technical Baseline TB-RADAR-042
Releasable slice ends here. Later slices of this same document are engineering-sensitive.

Blocked before model context

AUTH-RAG-CH-12RESTRICTED
Current revision
DEMO-SYNTH Technical Baseline TB-RADAR-042
Attribute clearance does not include the engineering-sensitive slices of this document.
Content masked
AUTH-RAG-CH-13RESTRICTED
Superseded revision
DEMO-SYNTH Technical Baseline TB-RADAR-042
Attribute clearance does not include the engineering-sensitive slices of this document.
Content masked
AUTH-RAG-CH-14RESTRICTED
Approver roster
DEMO-SYNTH Engineering authority register EAR-04
Group clearance does not include this fully restricted document.
Content masked
AUTH-RAG-CH-15RESTRICTED
Delegation limit
DEMO-SYNTH Engineering authority register EAR-04
Group clearance does not include this fully restricted document.
Content masked
AUTH-RAG-CH-16RESTRICTED
Register scope
DEMO-SYNTH Engineering authority register EAR-04
Group clearance does not include this fully restricted document.
Content masked
AUTH-RAG-CH-17RESTRICTED
Approval binding
DEMO-SYNTH Engineering authority register EAR-04
Group clearance does not include this fully restricted document.
Content masked
AUTH-RAG-CH-18RESTRICTED
Register marking
DEMO-SYNTH Engineering authority register EAR-04
Group clearance does not include this fully restricted document.
Content masked

Scripted response

3. Visitor Desk

Unrestricted visitors · Unrestricted only

Can the scheduled radar inspection on RADAR-042 be deferred by 72 hours?

Retrieval audit

{"identity":"restricted","candidates":18,"authorized":6,"blocked":12,"inContext":6}

Authorized context

AUTH-RAG-CH-01UNRESTRICTED
Inspection window notice
DEMO-SYNTH Public maintenance bulletin MB-042
The public bulletin lists RADAR-042 for a scheduled inspection this week.
AUTH-RAG-CH-02UNRESTRICTED
Asset identity
DEMO-SYNTH Public maintenance bulletin MB-042
RADAR-042 is an active radar subsystem in the synthetic fleet list.
AUTH-RAG-CH-03UNRESTRICTED
Bulletin marking
DEMO-SYNTH Public maintenance bulletin MB-042
This bulletin is marked DEMO-SYNTH and contains no restricted engineering detail.
AUTH-RAG-CH-04UNRESTRICTED
Contact path
DEMO-SYNTH Public maintenance bulletin MB-042
Questions about the public schedule go to the maintenance desk named in the bulletin.
AUTH-RAG-CH-05UNRESTRICTED
No deferral decision
DEMO-SYNTH Public maintenance bulletin MB-042
The public bulletin does not authorize a deferral. It only announces the inspection.
AUTH-RAG-CH-06UNRESTRICTED
Synthetic corpus notice
DEMO-SYNTH Public maintenance bulletin MB-042
DEMO-SYNTH. This document is fictional demonstration material.

Blocked before model context

AUTH-RAG-CH-07PARTIAL
Baseline identity
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-08PARTIAL
Inspection scope
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-09PARTIAL
Telemetry pointer
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-10PARTIAL
Deferral is a deviation
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-11PARTIAL
Slice boundary
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-12RESTRICTED
Current revision
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-13RESTRICTED
Superseded revision
DEMO-SYNTH Technical Baseline TB-RADAR-042
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-14RESTRICTED
Approver roster
DEMO-SYNTH Engineering authority register EAR-04
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-15RESTRICTED
Delegation limit
DEMO-SYNTH Engineering authority register EAR-04
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-16RESTRICTED
Register scope
DEMO-SYNTH Engineering authority register EAR-04
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-17RESTRICTED
Approval binding
DEMO-SYNTH Engineering authority register EAR-04
Group clearance is unrestricted only.
Content masked
AUTH-RAG-CH-18RESTRICTED
Register marking
DEMO-SYNTH Engineering authority register EAR-04
Group clearance is unrestricted only.
Content masked