agentsop-multi-tenant-rag

Security-first SOP for multi-tenant RAG systems. Activate when a calling agent is building, reviewing, or debugging any retrieval pipeline whose vector store is shared across more than one user, organisation, workspace, customer, or permission scope. Encodes the single non-negotiable rule — filter at the vector store query, never after retrieval / never after rerank — together with the per-vendor query-time filter…