Permission-safe retrieval: test the evidence boundary

Configure a retrieval policy for a fictional support assistant and test which evidence reaches its simulated answers. Deterministic practice simulation: every record and role is made up, and no AI model, external service or business system is used. Time: 30–45 minutes. All labs