rock
4d2dd6408b
docs: add memory-wiki-graph-rag-optimization.md — complete RAG + RBAC design
7 phases:
1. Wiki-link graph indexing (project scopes, skill links)
2. Multi-scope TF-IDF (global + project-local + chunk-level)
3. Hybrid retrieval (wiki-nav + TF-IDF + semantic search + RRF fusion)
4. LLM call optimization (budget-aware chunk selection)
5. Chunk-level metadata (category boost, key terms)
6. Cache alignment (KV cache hit ratio via wiki-link ordering)
7. OIDC + RBAC (JWT from Authentik, policy files in Vault)
JWT flow:
- Token validated against Authentik JWKS
- OIDC claims extracted (sub, groups, roles, permissions)
- Project-level RBAC check (403 if denied)
- Skill-level RBAC filtering (denied skills silently removed)
- All decisions logged to rbac_audit_log
3 access levels: private (owner only) | group (explicit list) | public
Policies stored in vault as YAML, any service can enforce.
2026-08-30 20:24:42 -07:00
..
2026-08-27 21:05:09 -07:00
2026-08-28 09:12:09 -07:00
2026-08-27 21:05:09 -07:00
2026-08-28 13:16:52 -07:00
2026-08-28 13:34:28 -07:00
2026-08-27 12:29:23 -07:00
2026-08-28 07:50:12 -07:00
2026-08-28 07:49:34 -07:00
2026-08-28 12:14:49 -07:00
2026-08-28 13:34:28 -07:00
2026-08-28 13:11:56 -07:00
2026-08-28 13:14:39 -07:00
2026-08-30 20:24:42 -07:00
2026-08-27 21:12:10 -07:00
2026-08-27 20:25:05 -07:00
2026-08-28 12:56:16 -07:00
2026-08-28 12:32:08 -07:00
2026-08-28 08:13:36 -07:00