Your RAG Post-Filter Is a Leak: Permission-Aware Retrieval in Django (Part 4)

Short version Post-filtering RAG is a leak pattern. Retrieve top-k by similarity, then drop what the user can't see, and you get empty answers for narrow users, restricted text in logs and rerankers,