Least-Privilege Retrieval

Least privilege is settled practice in access control and rarely applied to retrieval, where the instinct is to give the model everything the user is entitled to and let relevance sort it out. That maximizes recall and also maximizes what a single prompt injection or ranking error can surface. Applying least privilege means scoping retrieval to the task as well as the identity — a benefits question draws from benefits content even when the requester is entitled to more.

Taxonomy scoping in Centralpoint constrains a prompt to a branch of the hierarchy, so the surface for a given task is narrower than the requester's full entitlement. Scope boundaries in the governance tier reinforce it, and because both are properties of the index rather than post-filters, the narrowing is structural.