Blog
The Nacre blog
How Nacre works, how to run it, and where it fits beside the agents that use it. RSS feed.
-
When the data arrives with someone else's rules
A shared RAG index pulls from systems that each have their own permissions. Copy the ACLs onto every chunk, or grant at the source boundary? A test you can run.
-
Whose permissions does your MCP search run with?
A shared service key or the signed-in person, a pre-filter or a post-filter, and how fast a revoked grant bites. With a test you can run in five minutes.