Chapter 12 · Part 2: Input and context attacks

Cross-Tenant Leakage in RAG and Memory

Shared indexes and caches collapse isolation boundaries.

Frameworks: NIST AI RMF

Layers: context-assembly · memory

Public practitioner doctrine. Free doctrine. Open knowledge. Paid enforcement.