How Kep’s Retrieval Works: Ownership-First, Model-Last

That’s the entire point.

The Security Model: No Trust in the Black Box

Kep’s retrieval-augmented generation (RAG) follows one non-negotiable rule: ownership determines accessibility before the LLM even sees the query .

Here’s what doesn’t happen:

No “Hey ChatGPT, please only use documents User A is allowed to see”

No “We trust the model to filter sensitive content”

No “The answer sounds correct, so the permissions must be right”

Instead, the SQL query powering retrieval is filtered by ownership at the query level.

This is load-bearing. The model receives only documents the current user explicitly owns or has been shared—no judgement call, no post-filtering.…