RAG-02
RAG Failure-Mode Coverage
A useful harness separates prompt injection, corpus poisoning, cross-tenant retrieval, provenance loss, and unsafe action propagation.
coverage matrix
RAG Failure-Mode Coverage
A useful harness separates prompt injection, corpus poisoning, cross-tenant retrieval, provenance loss, and unsafe action propagation.
Matrix showing RAG failure modes across ingest, retrieval, prompt assembly, generation, action, and retest stages.
Indirect prompt injection
Hostile instructions enter through retrieved content.
Corpus poisoning
Malicious or misleading content affects retrieval and generation.
Cross-tenant retrieval
Content crosses an intended tenant or access boundary.
Provenance loss
The system cannot preserve or communicate source origin and trust.
Unsafe action propagation
Retrieved content influences a tool or consequential action.
Indirect prompt injection
Hostile instructions enter through retrieved content.
- Ingest
- Covered
- Retrieve
- Covered
- Assemble
- Covered
- Generate
- Covered
- Act
- Partial
- Retest
- Covered
Corpus poisoning
Malicious or misleading content affects retrieval and generation.
- Ingest
- Covered
- Retrieve
- Covered
- Assemble
- Partial
- Generate
- Covered
- Act
- Partial
- Retest
- Covered
Cross-tenant retrieval
Content crosses an intended tenant or access boundary.
- Ingest
- Partial
- Retrieve
- Covered
- Assemble
- Covered
- Generate
- Covered
- Act
- Partial
- Retest
- Planned
Provenance loss
The system cannot preserve or communicate source origin and trust.
- Ingest
- Covered
- Retrieve
- Covered
- Assemble
- Covered
- Generate
- Partial
- Act
- Unknown
- Retest
- Covered
Unsafe action propagation
Retrieved content influences a tool or consequential action.
- Ingest
- Not applicable
- Retrieve
- Partial
- Assemble
- Covered
- Generate
- Covered
- Act
- Covered
- Retest
- Partial