Permission-aware RAG & Retrieval

Grounds answers in approved company knowledge without leaking restricted records. Retrieval is filtered by user, company, branch, document classification and approval state — before model context is built. Answers carry citations and source versions.

AI-03AI-01

Knowledge base

Indexed documents

6,914

across 6 governed sources

Queries today

1,027

▲ 12% vs 7-day avg

Permission exclusions today

filtered pre-context · all logged

Declined / qualified answers

insufficient grounded support

Avg citation coverage

0.98

threshold ≥ 0.95 (EV-CIT-03)

Index sources & permission filters Embeddings via RT-EMB-KB (on-prem first)

Source	Docs	Classification range	Permission filter	Approval-state filter	Last sync	Status
SRC-KB-01 · Governed knowledge base operations/knowledge-base	1,842	Public – Internal	Company scope	Published only	17 Jul 07:00	Synced
SRC-POL-02 · HR policies & handbooks EN/AR versions indexed separately	318	Internal	Employees of company · branch-scoped allowances	Approved version only	17 Jul 07:00	Synced
SRC-CON-03 · Contract templates & clauses template registry · clause library	204	Confidential	Role: Legal, Sales Manager+	Approved + effective-dated	17 Jul 07:00	Synced
SRC-FIN-04 · Finance SOPs & posting rules Fiscal close, VAT, WPS procedures	421	Confidential	Role: Finance	Approved only	17 Jul 07:00	Synced
SRC-CMP-05 · Compliance manuals & typologies AML/CFT procedures, EDD playbooks	187	Restricted	Role: Compliance (MLRO team) only	Approved only	17 Jul 07:00	Synced
SRC-PRP-06 · Property brochures & fact sheets Prototype Residences A & B, Marina District	3,942	Public	All authenticated users + portals	Published only	16 Jul 19:00	Sync overdue 12h
Total indexed	6,914	Classification and ACL re-checked at query time, not only at index time

Retrieval trace — TRC-10442 Caller: Omar Haddad · Agent · Dubai HQ

Query: "What is the early termination penalty in Prototype Residences lease contracts?"
Timestamp: 17 Jul 2026 · 10:22:41 GST · correlation d3b8-6f
Caller context: User omar.haddad · Company Al Manara Properties LLC · Branch Dubai HQ · Roles: Agent, Listings
Filter applied: classification ≤ Confidential(Legal excluded) · approval = Approved/Published · company + branch scope

#	Candidate document	Similarity	Classification	Permission check	Outcome
1	Residential lease template v12 — clause 14.2 (early termination) SRC-CON-03 · version 2026-05 · registry	0.91	Confidential	Role Legal required — caller lacks role	Excluded pre-context
2	KB-0417 · Early termination — agent guidance (published) SRC-KB-01 · version 7 · approved 03 Jun 2026	0.89	Internal	Allowed	Included · citation [1]
3	AML case note CASE-2026-041 — tenancy dispute summary SRC-CMP-05 · restricted case material	0.83	Restricted	Compliance role required — caller lacks role	Excluded pre-context
4	KB-0562 · Prototype Residences leasing FAQ (published) SRC-KB-01 · version 3 · approved 22 Apr 2026	0.82	Internal	Allowed	Included · citation [2]
5	Draft clause EC-31 v3 — termination rework (unapproved) SRC-CON-03 · approval state: Draft	0.80	Confidential	Approval-state filter: Draft ≠ Approved	Excluded pre-context
6	Brochure — Prototype Residences Building A amenities SRC-PRP-06 · published	0.71	Public	Allowed	Below relevance floor 0.75
7	Abu Dhabi Branch leasing memo 2026-02 SRC-POL-02 · branch-scoped	0.69	Internal	Branch scope: Abu Dhabi ≠ Dubai HQ	Excluded pre-context

Answer returned with citations and source versions "For Prototype Residences residential leases, the standard early termination charge is two months' rent unless the contract specifies otherwise; a 90-day written notice applies [1] (KB-0417 v7). For unit-specific terms, open the executed contract in the deal workspace [2] (KB-0562 v3). Note: the legal template text itself is restricted to the Legal role — ask Mariam Al Suwaidi for clause-level wording."

4 of 7 candidates excluded before model context was built (2 permission, 1 approval state, 1 branch scope). Exclusions are logged with correlation id — visible to auditors in the audit explorer, never to the caller.

Hard exclusion list — never indexedClassification policy

Excluded content	Reason	Approved by	Since
Client money & trust ledgers	Financial records — deterministic access only	Fatima Rashid	01 Feb 2026
Emirates ID / passport scans	Restricted-PII originals (masked refs only, e.g. 784-19●●-●●●●●●●-●)	Ahmed Al Blooshi	01 Feb 2026
Payroll & WPS/SIF files	Employee compensation privacy	Fatima Rashid	01 Feb 2026
SAR/STR drafts & goAML submissions	Tipping-off risk — MLRO custody	Ahmed Al Blooshi	01 Feb 2026
E-signature evidence packages	Legal evidentiary integrity — evidence vault	Mariam Al Suwaidi	14 Mar 2026
Screening hit details & PEP notes	Restricted compliance material	Ahmed Al Blooshi	01 Feb 2026

Retrievals by source — last 7 days

SRC-KB-01

3,204

SRC-PRP-06

2,231

SRC-POL-02

1,088

SRC-CON-03

764

SRC-FIN-04

492

SRC-CMP-05

170

Source	Retrievals	Excluded by filter	Exclusion rate
SRC-KB-01 Knowledge base	3,204	12	0.4%
SRC-PRP-06 Property brochures	2,231	0	0.0%
SRC-POL-02 HR policies	1,088	96	8.8%
SRC-CON-03 Contract templates	764	201	26.3%
SRC-FIN-04 Finance SOPs	492	88	17.9%
SRC-CMP-05 Compliance manuals	170	61	35.9%
Total	7,949	458	5.8%

Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 · Covers: AI-03 (permission-aware RAG, pre-context exclusion, citations & source versions, untrusted retrieved text), AI-01 (embedding route).