Interface RagRetrievalScope

Enterprise access scope applied at retrieval time. The augmentor translates these into the vector-store layer's metadata filter so forbidden context is excluded from results, not retrieved and then asked-to-be-ignored.

Empty/undefined fields are treated as "no constraint" (e.g. no tenantId means cross-tenant retrieval is allowed). When set, only chunks whose matching field matches the scope are eligible:

• tenantId — exact match
• aclGroups — intersection with chunk's aclGroups must be non-empty
• classification — chunk's classification must be <= max sensitivity
• status — chunk must be one of the listed lifecycle states (default: ['active'])
• now — chunk's effectiveDate ≤ now ≤ expiresAt window