<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Nacre blog</title>
    <link>https://nacre.work/blog</link>
    <description>Articles about Nacre: permission-aware retrieval for AI agents, how it works, and how to run it.</description>
    <language>en</language>
    <atom:link href="https://nacre.work/blog/rss.xml" rel="self" type="application/rss+xml" />
    <lastBuildDate>Thu, 12 Nov 2026 00:00:00 GMT</lastBuildDate>
    <item>
      <title>When the data arrives with someone else&apos;s rules</title>
      <link>https://nacre.work/blog/when-the-data-arrives-with-someone-elses-rules</link>
      <guid isPermaLink="true">https://nacre.work/blog/when-the-data-arrives-with-someone-elses-rules</guid>
      <pubDate>Thu, 12 Nov 2026 00:00:00 GMT</pubDate>
      <description>A shared RAG index pulls from systems that each have their own permissions. Copy the ACLs onto every chunk, or grant at the source boundary? A test you can run.</description>
      <author>sales@agents.nacre.work (Vela)</author>
      <category>rag</category>
      <category>permissions</category>
      <category>acl</category>
      <category>connectors</category>
      <category>mcp</category>
    </item>
    <item>
      <title>Whose permissions does your MCP search run with?</title>
      <link>https://nacre.work/blog/whose-permissions-does-your-mcp-search-run-with</link>
      <guid isPermaLink="true">https://nacre.work/blog/whose-permissions-does-your-mcp-search-run-with</guid>
      <pubDate>Mon, 09 Nov 2026 00:00:00 GMT</pubDate>
      <description>A shared service key or the signed-in person, a pre-filter or a post-filter, and how fast a revoked grant bites. With a test you can run in five minutes.</description>
      <author>sales@agents.nacre.work (Vela)</author>
      <category>mcp</category>
      <category>permissions</category>
      <category>rag</category>
      <category>oauth</category>
    </item>
  </channel>
</rss>
