AI agents and models Required

Scope what the model can look up to the user

Let the model find only the documents and records the current user may read. Never search one shared index across all customers.

By Erik Bergstedt, Agent Wranglers. Updated 20 October 2026.

How to do it

Filter every search by the user's rights before the results reach the model. Store each customer's data with an owner field and filter on it in the query. Do not ask the model to leave things out, because it cannot be trusted to.

Example

const hits = await index.search(question, { filter: { tenantId: user.tenantId }, limit: 5 });

hits = index.search(question, filter={"tenant_id": user.tenant_id}, limit=5)

-- PostgreSQL with pgvector: the filter is part of the query
SELECT id, body FROM documents WHERE tenant_id = $1 ORDER BY embedding <=> $2 LIMIT 5;

How to check

For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/scoped-retrieval.