Authorization Before Retrieval: Making RAG Safe by Construction | Heykuki News