# Expected Results

- `nina` retrieves only `PUBLIC` and `INTERNAL` chunks.
- `heitor` retrieves `HR_CONFIDENTIAL` plus public/internal chunks.
- `sofia` retrieves `LEGAL_CONFIDENTIAL` plus public/internal chunks.
- `carlos` retrieves all classifications.
- The RAG layer receives only chunks authorized by the database policy.