Leila Tavakoli

\begin{abstract}For information access systems, it is not enough for outputs or answers to be relevant or correct; they must also be \emph{permitted}. This paper highlights a research gap: non-disclosure obligations often concern \emph{propositions} that must not be stated, while deployed Retriev...

Retrieval-Augmented Generation (RAG) typically assumes retrieved text can be freely paraphrased, but this fails in regulated domains where some passages must be quoted verbatim. We propose a policy-guided transformation pattern for RAG, where retrieved segments carry sensitivity metadata and a li...