AI · Reference Architecture
Secure RAG Reference Architecture
A retrieval architecture that treats identity, source authorization, provenance, prompt handling, evaluation and tool boundaries as first-class controls.
SECUREPLANE REFERENCE MODELSecure RAG Reference Architecture
Source authorization · data classification
01USERidentity · purpose
02GATEWAYpolicy · prompt
03RETRIEVALauthorized search
04CONTEXTprovenance · filter
05MODELgenerate · cite
06REVIEWhuman · monitor
Injection defense · evaluation · audit evidence
How can a RAG system retrieve useful context without bypassing the permissions and meaning of the source system?
Representative outputs
Artifacts that make the decision usable
No diagram is a deployable design until it is adapted to the environment, evidence, owners, and operating constraints.
RAG trust-boundary architectureAuthorization flowProvenance modelEvaluation planMonitoring and incident requirements