RAG - LLMs
An LLM retrieves external knowledge before generating an answer.
Classification definition is a project adaptation of the DASF deployment model descriptions. Source applicability is column I of AI Lifecycle Risks, snapshot 2026-10-22.
Combine patterns using union (OR). An agent that uses retrieval and a third-party model should include agentic-ai, rag and external-model; include foundation-llm if the model is a foundation model. Do not assume “pre-trained” means merely calling an already trained foundation model: this taxonomy distinguishes pretraining from consumption.
34 source-applicable risks:
- DASF-R-1.1 — Insufficient access controls
- DASF-R-1.2 — Missing data classification
- DASF-R-1.3 — Poor data quality
- DASF-R-1.4 — Ineffective storage and encryption
- DASF-R-1.5 — Lack of data versioning
- DASF-R-1.6 — Insufficient data lineage
- DASF-R-1.7 — Lack of data trustworthiness
- DASF-R-1.8 — Legality of data
- DASF-R-1.9 — Stale data
- DASF-R-1.10 — Lack of data access logs
- DASF-R-1.11 — Compromised 3rd-party datasets
- DASF-R-3.1 — Data poisoning
- DASF-R-3.2 — Ineffective storage and encryption
- DASF-R-4.1 — Lack of traceability and transparency of model assets
- DASF-R-4.2 — Lack of end-to-end ML lifecycle
- DASF-R-6.3 — Lack of Interpretability and Explainability
- DASF-R-7.2 — Model assets leak
- DASF-R-7.4 — Source code control attack
- DASF-R-8.3 — Model lifecycle without HITL (human-in-the-loop)
- DASF-R-9.8 — LLM hallucinations
- DASF-R-9.9 — Input Resource Control
- DASF-R-9.10 — Accidental exposure of unauthorized data to models
- DASF-R-9.11 — Model Inference API Access
- DASF-R-9.12 — LLM Jailbreak
- DASF-R-9.13 — Excessive agency
- DASF-R-10.1 — Lack of audit and monitoring inference quality
- DASF-R-11.1 — Lack of MLOps — repeatable enforced standards
- DASF-R-12.1 — Lack of vulnerability management
- DASF-R-12.2 — Lack of penetration testing, red teaming and bug bounty
- DASF-R-12.3 — Lack of incident response
- DASF-R-12.4 — Unauthorized privileged access
- DASF-R-12.5 — Poor security in the software development lifecycle
- DASF-R-12.6 — Lack of compliance
- DASF-R-12.7 — Initial Access