Start here. This is the direct spoken answer to practice first.
Overview
A similarity score cannot replace hard constraints such as tenant, status, locale, or effective date.
I apply mandatory authorization and domain constraints before an item can become retrieval evidence. A metadata filter might restrict results to the caller's tenant, approved documents, the requested product, and currently effective versions. Post-filtering a small top-k list can lose the best permitted matches and must never be the only security control.