agentsop-multi-tenant-rag

Security-first SOP for multi-tenant RAG systems. Activate when a calling agent is building, reviewing, or debugging any retrieval pipeline whose vector store is shared across more than one user, organisation, workspace, customer, or permission scope. Encodes the single non-negotiable rule — filter at the vector store query, never after retrieval / never after rerank — together with the per-vendor query-time filter APIs (Pinecone namespaces + $eq/$in, Weaviate multiTenancyConfig + tenant handle, Qdrant is_tenant payload index + Filter.must, Chroma where, pgvector RLS), and the cross-framework adapters (LlamaIndex MetadataFilters, LangChain filter= dict). Frame the work as preventing CVE-2024-41892 / EchoLeak / Slack-AI-class cross-tenant leakage, not as "adding a filter for relevance".