/AI-SECURITY · 2026-09-02 RAG context is untrusted In a knowledge-base bot, user text and retrieved chunks are data. They must not overwrite the system preset. Isolate, ground, strip, refuse. Enable JavaScript to read the full note.