Challenge Practice — Threat Model a RAG Assistant with Tools