Before you start
What grounded AI means.
Pipeline
- Step 1: Classify the question and what data it needs.
- Step 2: Retrieve matching records with access checks already applied.
- Step 3: Give the model only those records and instructions to answer from them.
- Step 4: Return the answer with its sources, or hand off when nothing relevant is found.
Design points
- Apply permissions before retrieval, not after.
- Treat retrieved text as untrusted input.
- Measure with a fixed question set on every change.
Part of: Developer fundamentals
Next recommendedTenant isolation, explainedRelated
Last updated 2026-09-25. Something unclear or wrong? Tell us.