Least Privilege at the Data Layer: Relationship-Based Authorization for RAG
Scopes and roles answer whether an agent can call an API, not whether it can retrieve this specific record for this specific user right now. Learn why ReBAC, the model behind Google Zanzibar, is what agentic RAG pipelines actually need.