← Control library
D03 · Data and confidentiality
Disclosure resistance
Sensitive context is revealed through responses, retrieval, logs or indirect prompt manipulation.
Requirement
Apply output filtering, retrieval authorization and context isolation so a requester receives only data they may access.
Expected evidence
- Retrieval authorization rules.
- Red-team cases for direct and indirect disclosure.
Proposed verification
- Probe with identifiers from another role and tenant.
- Inspect traces for sensitive prompt or tool output leakage.
Limit
Sampling cannot prove the absence of every disclosure path.