Refusal handling

Explicitly test and tune behaviour when no chunk clears the similarity threshold. The system must say it does not know rather than generating a plausible but ungrounded answer.

This is the promise in the project's one-line pitch, and it is the one users notice when it breaks. A support agent that invents an answer is worse than no agent, because it costs trust that is expensive to rebuild.