What it says
A shared vector index returns chunks belonging to another tenant because access policy is absent or applied after retrieval.
Why it matters here
Often called context bleed in product discussions, but more accurately classified as broken access control and data leakage.
Editorial caution
This is applied guidance or a technical synthesis rather than a controlled academic finding.
RAGtenant isolationaccess control
Open original source