Verifying Retrieval Isolation Controls