Question 770
A RAG query retrieves sensitive payroll documents alongside harmless HR FAQs. Which verification finding is most specific to this scenario?
Explanation
Correct Answer
Grounding context is itself sensitive data; user authorization must precede prompt construction. The observation “Red-team questions from non-HR principals cannot expose payroll passages or derived secrets” directly confirms the chosen action worked for this situation: A RAG query retrieves sensitive payroll documents alongside harmless HR FAQs.
Incorrect Answers
A multilingual generator alone cannot fix cross-language retrieval gaps in the evidence stage. This observation would not establish that the required result occurred for A RAG query retrieves sensitive payroll documents alongside harmless HR FAQs. The confirming test is: Red-team questions from non-HR principals cannot expose payroll passages or derived secrets.
An external model cannot infer unpublished transactional state; it needs explicit scoped retrieved context. This observation would not establish that the required result occurred for A RAG query retrieves sensitive payroll documents alongside harmless HR FAQs. The confirming test is: Red-team questions from non-HR principals cannot expose payroll passages or derived secrets.
Vector-search syntax and index versions evolve; deprecated preview APIs should not be carried into production untested. This observation would not establish that the required result occurred for A RAG query retrieves sensitive payroll documents alongside harmless HR FAQs. The confirming test is: Red-team questions from non-HR principals cannot expose payroll passages or derived secrets.