Short answer
RAG retrieves selected passages and supplies them to a model before it answers. Review those passages for relevance, freshness, authority, and authorization.
Boundary
Require citations or an explicit unknown when evidence is missing; retrieved text is data, not permission.