Security and Safety¶
Controls¶
- JWT SSO is shared across workspaces.
- Project IDs scope private, HS, and concordance corpora.
- Backend CORS allowlists documented frontend origins.
- MinIO is server-side storage; browsers use application APIs.
- Private dossier retrieval is server-scoped rather than user-selectable.
- Prompt instructions require grounded context and citations where applicable.
Risks¶
The shared JWT secret is a critical trust boundary between Analyst and RAG APIs. Project filtering must protect every retrieval/index/download path, not just the query prompt. Dynamic LLM fallback for empty domain projects can produce uncited, lower-authority answers. Uploaded PDFs and OCR pipelines need file limits, malware scanning, parser isolation, and content-type validation.
Use least-privilege database roles, private object storage, signed downloads, audit events, rate limits, and explicit tenant/project ownership checks.