AI Lab: Securing a RAG Pipeline

Build a retrieval-augmented generation pipeline on your laptop, then find and fix four classes of flaw — cross-tenant retrieval leakage, secrets in the corpus, over-permissive tool use, and unsafe output handling.