Secure RAG for SQLAlchemy and pgvector

Ship secure, permissions-aware RAG apps with Oso. Define access rules once, apply them to SQLAlchemy queries, and filter embeddings in pgvector automatically.