{"data":{"id":"f922d311-d96c-4f97-b808-814359529067","title":"Enterprise Agentic RAG with Pre-Search Role-Based Access Control, Multi-Layered Guardrails, and Operational Telemetry","summary":"This paper introduces Enterprise Agentic RAG, a production-grade architecture built on a stateful 7-agent LangGraph workflow with Pre-Search Vector Payload Filtering across four security clearance tiers. It combines BM25 with Qdrant HNSW dense retrieval fused by Reciprocal Rank Fusion, plus an egress DLP firewall and deterministic guardrails. Reported benchmarks include 100% RBAC pre-filter precision, zero embedding leakage across privilege boundaries, a 98.7% average groundedness score, and sub-150ms latency.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://doi.org/10.22214/ijraset.2026.85274","publishedAt":"2026-10-22T00:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection","data_extraction"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LangGraph","Qdrant","Prometheus"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-22T00:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"rag","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":"peer_reviewed","atlasIds":["AML.T0051"]}}