Stove-pipe RAG retrieval to prevent cross-tenant leakage (#40) #41

Merged
westfarn merged 1 commits from fix/rag-tenant-stove-pipe-40 into master 2026-08-01 12:35:01 -07:00
1 Commits
Author SHA1 Message Date
westfarn 7fae0175cf Stove-pipe RAG retrieval behind ChatCompanyScope (#40).
CI / test (pull_request) Successful in 10s
Unit Tests / test (pull_request) Successful in 9s
Validate conversation ownership before workspace resolution, fail closed
when Chroma filters are missing, and close ConversationDetailView IDOR so
tenants cannot pull another company's document chunks.
2026-08-01 14:31:10 -05:00