🔎 Permission-aware RAG
Your agent retrieves documents on your behalf — but every candidate document is run through a real authorization Check first. The agent physically cannot surface a document you aren't allowed to view; access is decided by the Check, never by the prompt.
This is the same check() evaluator the FGA lab uses, run once per candidate
document (object document:<slug>, relation viewer, subject user:<you>).
Retrieval is authorized against your own relationship graph — “your agent
retrieves using your permissions” — so nothing comes back until a tuple says you can view it.
Before querying, grant your own user viewer access on a document or two — head to the FGA lab and either add a tuple by hand
(e.g. document:readme viewer user:you) or click “Seed demo” for
a populated graph.
The corpus
A fixed set of documents your agent could retrieve from — titles only; content is never sent unless a document comes back retrieved ✓ below.