- Published on
Semantic search doesn't throw errors when it returns the wrong tenant's data. It just returns it—and your agent weaves it into the response like it belongs there. This failure surfaces silently between customer 20 and 30, and when it does, the fix isn't a configuration change. It's a full audit of your execution graph, measured in months. Here's the architectural decision that prevents it.