Options for context retrieval: inline short and known policies directly, use web search for public time-sensitive information, use hosted file_search for approved company documents, and only build a custom retrieval stack when strict control over ranking permissions is required