https://howtonotcode.com/story/2300-rag-security-is-moving-inside-the-pipeline