needtoknow

Permission-aware retrieval for RAG: every user gets only the chunks they are allowed to read. Works with any vector store, permission system (OpenFGA, OPA, ACLs) and framework (LangChain, LlamaIndex). Fails closed.

GitHub

Official source

Start locally with the CLI guide