Adding a Trust Boundary to a LlamaIndex RAG Pipeline

Your LlamaIndex app does not only retrieve documents. It decides which external text is allowed to become model context. That is a trust decision, even if your code does not call it one. A PDF can contain useful facts. A support ticket can contain real customer context. A web page can contain documentation. An email thread can contain the answer your user needs. But all of those sources can also contain instructions your model should never follow. That is the uncomfortable part of RAG security: