Why not filter only in UI?
Because restricted context may still reach the model.
Interview Questions: Access Control and Safety
What belongs in audit logs?
User claims, policy version, allowed chunks, denied chunks, and denial reasons.
Because restricted context may still reach the model.
User claims, policy version, allowed chunks, denied chunks, and denial reasons.