Before you start: What grounded AI means.
Pipeline
- Classify the question and what data it needs.
- Retrieve matching records with access checks already applied.
- Give the model only those records and instructions to answer from them.
- Return the answer with its sources, or hand off when nothing relevant is found.
Design points
- Apply permissions before retrieval, not after.
- Treat retrieved text as untrusted input.
- Measure with a fixed question set on every change.
Part of: Developer fundamentals
Next recommendedTenant isolation, explainedRelated
Last updated 2026-09-25. Something unclear or wrong? Tell us.