retrieval

An easy question with a lot of surface area. The scored answer walks the pipeline left to right, names the attacker's lever at each stage, and ties each to one control.

Embeddings are not hashes. The scored answer explains what they capture, how attackers exploit similarity, and why a vector store deserves the same protection as the documents.

Most bad retrieval is a quality bug; some of it is an attack or an access failure. The scored answer separates the cases quickly and checks the security ones first.

The most similar chunk is often the one written to be retrieved. The answer adds provenance to every chunk, ranks with it outside the model, and refuses to let text declare its own authority.