How should Metadata filtering be designed for production?

Apply authorization filters before or during retrieval, store reliable metadata during ingestion, validate tenant boundaries, and test that unauthorized content is never returned.