The Evidence Path

Privacy and robust retrieval

11 of 12 · Security · 8 named systems

Secure RAG separates privacy, authorization, evidence integrity, adversarial robustness, and statistical risk into explicit controls.

Privacy and robust retrieval: architecture comparisonEach lane reads from input to output.

Private retrieval

  1. protectPrivate query
  2. searchRestricted similarity
  3. returnBounded candidates
  4. measureLeakage and utility
  • Private RAG (PRAG)
  • RemoteRAG

Security filtering

  1. retrieveUntrusted evidence
  2. inspectIntent and conflict
  3. filterUnsafe clusters
  4. verifyAnswer consistency
  • SeCon-RAG
  • SafeRAG

Certified aggregation

  1. sampleEvidence subsets
  2. aggregateRobust candidates
  3. calibrateDeclared risk
  4. boundAssumption-specific guarantee
  • C-RAG
  • PRA-RAG

Threat path

  1. injectPoisoned source
  2. retrieveManipulated rank
  3. propagateHostile context
  4. detectStability and provenance
  5. containAbstain or isolate
  • AgentPoison
  • PoisonedRAG

Read the full explanation