RAG

Reduce prompt-injection risk in DeepSeek RAG and agents with trust boundaries, permission checks, exact-action approval, safe tools, and offline Python tests.

Evaluate DeepSeek RAG with an offline Python fixture, evidence coverage, citation checks, calibrated judges, safety tests, and reproducible release gates.