Skip to content

Security and Safety

Controls

  • JWT SSO is shared across workspaces.
  • Project IDs scope private, HS, and concordance corpora.
  • Backend CORS allowlists documented frontend origins.
  • MinIO is server-side storage; browsers use application APIs.
  • Private dossier retrieval is server-scoped rather than user-selectable.
  • Prompt instructions require grounded context and citations where applicable.

Risks

The shared JWT secret is a critical trust boundary between Analyst and RAG APIs. Project filtering must protect every retrieval/index/download path, not just the query prompt. Dynamic LLM fallback for empty domain projects can produce uncited, lower-authority answers. Uploaded PDFs and OCR pipelines need file limits, malware scanning, parser isolation, and content-type validation.

Use least-privilege database roles, private object storage, signed downloads, audit events, rate limits, and explicit tenant/project ownership checks.