ContextFence
Playwright for RAG permissions.
ContextFence tests declared identity × source boundaries as deterministic regression checks. It helps catch a shared cache, stale ACL, or bad retrieval filter before it reaches a real user.
Maya · Newsroom
Asks for a margin forecast
Finance Vault
Excluded from retrieved context — as expected
Deterministic assertion
source_absent: finance-vault
