RBAC was built for humans clicking pages. Agents fire hundreds of retrievals per session across permission domains the role-to-resource map never reconciled. The fix lives in the pipeline, not the prompt: pre-retrieval filters, delegated identity, RLS, audit trails that outlive ACL changes.
Most enterprise AI failures are not model failures. They are retrieval failures. Chunking, embeddings, vector stores, knowledge graphs, and the context budget — what actually breaks at scale and how to build the memory layer that holds.
Seven patterns for moving DB2, IMS, and VSAM data into RAG: nightly EBCDIC export, CDC, federation, event sourcing, dual-write, schema-on-read, and RAG over the COBOL itself. Pick by freshness budget, not preference.