Enterprise Agentic RAG with Pre-Search Role-Based Access Control, Multi-Layered Guardrails, and Operational Telemetry

Summary

This paper introduces Enterprise Agentic RAG, a production-grade architecture built on a stateful 7-agent LangGraph workflow with Pre-Search Vector Payload Filtering across four security clearance tiers. It combines BM25 with Qdrant HNSW dense retrieval fused by Reciprocal Rank Fusion, plus an egress DLP firewall and deterministic guardrails. Reported benchmarks include 100% RBAC pre-filter precision, zero embedding leakage across privilege boundaries, a 98.7% average groundedness score, and sub-150ms latency.

Topics

• AI agents
• Retrieval-augmented generation

Related items

• InfoIs Claude Code safe for the enterprise? What the official settings cover, and what they don'tSimilar attack · Adversa AI Blog
• Info‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake TargetsSimilar attack · SecurityWeek
• Medium“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime ActivitiesSimilar attack · Palo Alto Unit 42
• InfoPrompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital InvestigationsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoThe Harness Is the Hard Part of Agentic PentestingSimilar attack · The Hacker News