securityragabac Why Your RAG Needs a Real Security Model RAG can leak across boundaries it was never meant to cross. Why prompt-level guardrails aren't enough, and how ABAC-governed retrieval closes the gap.