How would you answer an interview scenario involving Metadata filtering?

For a multi-tenant RAG application, explain how you would ensure one customer can never retrieve another customer’s documents.