Unverified50% confidenceSolutionExact time
When revoking permissions, enterprises often only delete the access credentials to the source documents while leaving the vector index in the database; decommissioning and settlement requires assessing whether to remove the corresponding vectors from the index and trigger an index rebuild.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedGDPR的被遗忘权条款要求数据可被彻底删除，但网关若将请求日志用于模型微调或质量评估可能产生难以追溯的数据留存71% similarUnverifiedIn the pre-indexing approach of attaching permission metadata at the document indexing stage and then filtering by metadata, the permission snapshot in the index may already be outdated once permissions are updated in the source system.70% similarUnverified欧盟 GDPR 第 17 条赋予用户被遗忘权（Right to Erasure），对向量数据库带来挑战：HNSW 索引删除操作往往需要重建索引，且模型微调后需实现机器遗忘69% similarUnverifiedIn a RAG assistant, a vector index may bypass the original system's permission checks, causing unauthorized users to silently obtain sensitive documents through semantic retrieval, and if personal data is involved, this may also constitute a compliance issue.67% similarUnverifiedMost enterprise RAG systems bake access control into the vector index at the embedding stage, treating permissions like content freshness, so that revoked access rights can still return results through retrieval, forming a security lag window.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1070113API
curl https://kongchang.com/api/v1/knowledge/claims/1070113MCP
get_claim(id=1070113)