Mapping Trust Boundaries in a RAG Pipeline