TL;DR: A new open-source tool lets developers test whether RAG applications leak documents users shouldn't see.
Summary: The tool supports offline test cases and live HTTP API testing with bearer token/API-key auth. It is designed to catch cases where a retrieval-based AI app retrieves documents a user lacks access to. The developer is seeking testers for non-sensitive environments.
Why it matters: Helps AI builders add security checks to RAG pipelines. Try it on staging or test environments to validate access control.
Source: reddit