Filtering After Retrieval Leaks Your Documents. Put the ACL Inside the Query.

In permission-aware RAG, filtering documents after retrieval is a data leak; the access-control predicate belongs inside the retrieval query itself.