Your CSPM shows zero findings while the richest store of your customers’ data sits outside its field of view. A security architect’s field guide to why an embedding isn’t a hash, how vector stores actually leak, and the config that keeps them from becoming your next 2 a.m. incident.