Mind the Hook: Source-Level Auditing of Privacy Defenses in Retrieval-Augmented Generation

Black-box privacy scores for retrieval-augmented generation (RAG) are difficult to interpret unless the audited defense's active pipeline hook is known. We propose an active-path audit: inventory source-level hooks over retrieval, retrieved content, and generation; map each metric to the leakage cha...