Users may access different policy documents. How should a RAG application prevent retrieval of documents the caller is not authorized to see?

1. Hide document titles while sending their full content to every caller
2. Enforce document authorization during retrieval using an appropriate supported security-filtering design
3. Retrieve everything and ask the model to keep secrets voluntarily
4. Assume vector similarity encodes user permissions