Sentinel-Strategist Architecture Reduces RAG Security Trade-off
A new architecture called Sentinel-Strategist addresses the security-utility trade-off in retrieval-augmented generation (RAG) systems. Proposed in arXiv:2604.20932, the framework uses a Sentinel to detect anomalous retrieval behavior and a Strategist to selectively deploy defenses based on query context. Experiments show an always-on defense stack reduces contextual recall by over 40%, but Sentinel-Strategist mitigates this cost. The architecture is evaluated across three benchmark datasets, targeting multi-vector attacks like membership inference, data poisoning, and content leakage. This work is relevant for sensitive domains such as healthcare and law where RAG systems rely on private knowledge.
Key facts
- Sentinel-Strategist architecture proposed for RAG security
- Always-on defense reduces contextual recall by over 40%
- Framework uses Sentinel for anomaly detection and Strategist for defense selection
- Evaluated on three benchmark datasets
- Targets membership inference, data poisoning, content leakage
- Relevant for healthcare and law domains
- Published on arXiv with ID 2604.20932
- Addresses multi-vector attacks
Entities
Institutions
- arXiv