Steps
- List allowed connections and data classes.
- Assign distinct identities to client, gateway, model, and retrieval services.
- Write authorization rules and test one denied access.
- Use real documents only after the map passes review and the data owner explicitly approves the test.
Verify and rollback
Allowed and denied paths produce expected results. Revert the configuration to its prior mapping if the boundary is unclear.