How to meet it
OWASP AISVS v1.01
Memory, Embeddings & Vector Database Security · Access Controls on Memory & RAG Indices
Lock document metadata after writing
Verify that document metadata tags are immutable after the initial write.
OWASP AISVS v1.01, requirement 8.1.2
In plain English
Once a document's metadata, such as owner, permissions and source, is written, it should not be possible to change it in place.
What good looks like
- Metadata cannot be updated after ingestion.
- Corrections create a new version.
- Attempts to change metadata are logged.
How teams usually do it
- Write-once fields in your vector store, or an ingestion service that is the only writer.
Evidence an auditor would accept
- Store configuration and access rights.
Common mistakes
- Letting the application change access metadata on existing vectors.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.