RAG Strict Source Control

Let’s say you work as an LLM engineer at an enterprise software company. You are tasked with designing a retrieval-augmented generation (RAG) system to ensure that the language model only provides answers based on a specific set of ingested documents, and never responds using its original training data.

How would you architect this system?