Enforce fine-grained authorization in RAG apps with Cerbos and ChromaDB. Learn how @cerbos/langchain-chromadb converts Cerbos query plans into ChromaDB filters, so vector search respects access policies at retrieval time and prevents unauthorized data from reaching your LLM.