RAG systems expose sensitive data through both search results and chat histories, but most only protect the search path. A middleware layer could apply RBAC policies to chat replay.
Build as a plugin for popular RAG frameworks with configurable rules for message redaction, read permissions, and retention policies.
Start with basic role-based restrictions compatible with LangChain before expanding to full policy engines.
Risk is low adoption if seen as complicating existing deployments.