AICORE

In-app AI Assistance Security

Deliver an authenticated in-app assistant that answers only application-usage questions and authorized live-data questions, while preserving unrestricted documentation retrieval for the developer CLI.

State
Done
Progress
100%
Steps
52 / 52
Started
2026-09-15
Finished
2026-09-15
Modules
LaraAI, LaraCore

Tasks.

  • Task 1: Server-owned assistant profiles and access context5/5
  • Task 2: Physically separate documentation indexes5/5
  • Task 3: Permission- and tenant-filtered in-app retrieval4/4
  • Task 4: Mandatory fail-closed guardrail pipeline6/6
  • Task 5: Typed read-only Core Graph gateway4/4
  • Task 6: Context-bound AI Graph tools4/4
  • Task 7: Protected in-app response flow and non-streaming contract5/5
  • Task 8: Security release gate, evaluation, and documentation6/6
  • Completion checklist13/13

Read the full plan on GitHub