Evaluation

Access control belongs below the prompt: filter before ranking, one error message for ‘missing’ and ‘forbidden’, identity from the caller. Plus the three false alarms my own security scorer raised.

An agent looked 12/14 vs 7/14 on a blind set I had quietly reused. On a freshly frozen set it tied single-shot RAG at 10/12—at three times the cost.