Skip to content
Preprint

RH-RAG: Trustworthy Long-Form Generation for Privacy-Constrained Settings

Aug 2026 · 0 citations · 45 references
Computer Science

TL;DR

Evaluations across literary, financial, and legal domains demonstrate that RH-RAG consistently improves factual grounding, semantic coherence, and document-level alignment compared to standard and hierarchical RAG baselines, while achieving reliability competitive with proprietary cloud-based systems without compromising data privacy.

Abstract

Generating long-form content from extensive internal reports remains challenging for organizations operating under strict privacy and security constraints, where proprietary cloud-based LLM APIs are often not viable. While locally deployed open-weight models offer a privacy-preserving alternative, existing retrieval-augmented generation (RAG) approaches on smaller models frequently lack effective global planning and accumulate factual inconsistencies over long outputs. To address these limitations, we present RH-RAG, a multi-agent framework for secure and trustworthy long form generation using local language models. RH-RAG decomposes generation into three coordinated stages: a Planner Agent that constructs a global document outline from high-level semantic summaries, a Writer Agent that incrementally generates coherent section-wise content using bounded coherence memory, and a Checker Agent that mitigates hallucinations through natural language inference-based factual verification and an attestation-driven revision loop. The framework further employs a dual-level retrieval index that supports efficient planning and fine-grained contextual generation on consumer-grade hardware. Evaluations across literary, financial, and legal domains demonstrate that RH-RAG consistently improves factual grounding, semantic coherence, and document-level alignment compared to standard and hierarchical RAG baselines, while achieving reliability competitive with proprietary cloud-based systems without compromising data privacy.

View source

Similar papers

Review Open access Aug 2026

Security and privacy challenges of RAG systems

This study presents a detailed, actionable approach to constructing secure, privacy-focused RAG systems and culminates in the Integrated Privacy-Preserving RAG Framework (IPRAG), a five-tier architecture supported by a three-phase deployment protocol.

Firoz Mohammed Ozman · 0 citations
#small language model Open access Aug 2026

GS-Chaff: Multi-Agent Prompt-Level Semantic Chaffing for Privacy-Preserving LLM Inference

Generative semantic chaffing (GS-Chaff), a training-free multi-agent framework for privacy-preserving LLM inference over natural-language text queries that hides the user’s true intent among semantically plausible chaff queries, is proposed.

Quan Zhou, Zhi-Cheng Wang, Zhengjun Yue et al. · 0 citations
2026

DP2-RAG: An Efficient Full-Process Differential Privacy Implementation in Retrieval-Augmented Generation

As Retrieval-Augmented Generation (RAG) brings Large Language Models (LLMs) into contact with proprietary and user-specific knowledge bases in sensitive domains, protecting the privacy of both queries and knowledge content becomes a critical requirement. The RAG pipeline, however, exposes sensitive information at two d...

Yuxuan Cai, Chao-Xiang He, Hong-Sheng Hu et al. · 0 citations
Preprint Aug 2026

Privacy-Preserving RAG by Concealing Sensitive Information from External LLMs

This paper introduces the Sensitive Entity Alias Generator (SEAG), a privacy-preserving framework that empowers users to utilize powerful third-party generators without disclosing sensitive information and demonstrates the success of the SEAG framework.

Saleh Almohaimeed, Saad Almohaimeed, Mousa Jari et al. · 0 citations
Conference 2026

Att2RAG: A Double-Condition Framework for Knowledge Poisoning Attacks on RAG Systems

Att2RAG is presented, a double-condition framework for knowledge poisoning attacks on RAG systems that decomposes a successful poisoning event into a retrieval condition and a generation condition, and casts poisoning as maximizing attack success subject to satisfying both conditions.

Zhize Hao · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.