AI Application Security Testing: The Authorisation Boundary

OWASP's LLM list names permission-aware retrieval as a requirement and leaves enforcement placement to you. Here is how to test whether the tenant boundary in an AI feature actually holds.