RAG becomes trustworthy when retrieval is part of governance:
Curate sources and attach license/usage rights to each document.
Chunk by semantics (headings, tables, code blocks) and store span offsets.
Rerank by authority and recency; diversify results to avoid near duplicates.
Require citations at claim-level; block or label uncited content.
Cache “last updated” timestamps so users understand currency.