oracle-deep-data-security-lab/scenarios/06-rag-vector-classified-docs/evidence/expected-results.md

Expected Results

• nina retrieves only PUBLIC and INTERNAL chunks.
• heitor retrieves HR_CONFIDENTIAL plus public/internal chunks.
• sofia retrieves LEGAL_CONFIDENTIAL plus public/internal chunks.
• carlos retrieves all classifications.
• The RAG layer receives only chunks authorized by the database policy.