How does DGE avoid exposing content that should remain private?

There is no dedicated capability for restricting exposure at this stage. DGE and RAG index published content on the site because the layer is meant to improve discoverability. The system assumes that anything published on the public website is intended to be accessible, so private, draft or protected material is not indexed.