Passage search can fail after vector recall succeeds

Valid vector and text indexes do not prove that passage search will meet its deadline. Candidate recall can succeed while row-level visibility recursively rebuilds session, grant, or organization authorization. Measure authorization-set construction separately under the real search role. Report raw recall, search reliability, source coverage, and passage usefulness as separate metrics; correct-session retrieval alone is not a successful answer path.