Apply the user’s permissions to retrieval
Decide which documents each role may search. Test that restricted documents remain inaccessible, including through summaries and cached answers. Record document ownership and how updates or removals reach the search index.
Test unsupported and conflicting questions
Require useful source references and a clear way to decline when evidence is missing. Test outdated documents and contradictory instructions. Source links improve reviewability; they do not guarantee a correct answer. Keep consequential actions behind explicit approval.