Spring AI Secure RAG

The purpose

Shows that authorization must filter retrieval before any content can enter model context.

What the project exposes

Immutable server filter, idempotent ingestion, score threshold, server-built citations and a negative cross-tenant test.

How to verify it

mvn verify and the container build reproduce the contract without an external model key.

Provenance

The public murillo-consulting repository is the source for this presentation. Its history, license and files are the reference for understanding the exact provenance of contributions and dependencies.

Limits to understand

The in-memory index and header identity are explicitly limited to the local demonstration.

This demonstrator is neither a production validation for your system nor evidence of a client engagement. Adoption requires a review appropriate to your environment.