When I add AI to an existing business application, my first concern is not the chat interface. It is whether the assistant can access something the current user cannot. That is the starting point for my RAG ASP.NET Core implementation in SupportAgent.NET, an ASP.NET Core and React customer-support copilot. The internal assistant uses native tool calling to look up permitted customer and order records through normal .NET services. It also retrieves company documents and drafts replies, whic...