A pgvector query must retrieve the nearest documents from one authorized tenant. Which design is appropriate?

1. Treat similarity rank as proof of user permission
2. Omit vector dimensionality checks
3. Combine compatible vector similarity with an authorized tenant metadata filter
4. Search every tenant and rely on the model to hide forbidden results