FIELD 03 / FAILURE REPORT
Retrieval flattened permissions
A user received a citation to a document they could not open directly.
Situation
Indexing copied content into one shared collection and stored source URLs without effective access metadata.
Finding
The retrieval layer authenticated the user but never applied source authorization to candidate chunks.
Response
- Attach source ACL metadata
- Filter before ranking
- Test restricted documents
- Propagate deletion
ARCHITECTURE LESSONA citation does not fix unauthorized retrieval. Permission must constrain the evidence before generation.