RAG that earns trust: citations, permissions, and freshness

Employees do not need another chat window. They need answers they can act on — tied to the right document version, visible only to people allowed to see it, and honest when the corpus has nothing useful to say.

Start with permissions. If retrieval ignores IAM, you have built a data leak with a friendly UI. Propagate ACLs from source systems into the index and enforce them at query time.

Citations are not optional decoration. Show the passage, the document title, and the timestamp. Train users to verify high-stakes answers. Track citation click-through as a health metric.

Freshness kills trust quietly. Stale indexes produce confidently wrong guidance. Invest in change detection, incremental re-indexing, and clear “as-of” labelling for time-sensitive policies.

Finally, evaluate on your documents — not public benchmarks. Golden question sets written with subject-matter experts will tell you whether the system is ready for production far better than a leaderboard score.