Can user A's question pull user B's documents? A tenant-isolation checklist for RAG

Most RAG data leaks don't need a clever attacker. They need one missing filter. A shared vector index, a retrieval call that forgot the tenant_id, a semantic cache keyed only by the question text, and