Several agents consume one enterprise knowledge corpus, but they serve users with different permissions. What must retrieval enforce?

1. Retrieve everything and rely only on agents not to reveal it
2. Use similarity score as user authorization
3. The authorized source scope for the current user and delegated task
4. Remove source permissions to simplify collaboration