FlowRAG — Two-Stage Edge–Cloud Intrusion Detection
An on-device fast path clears ~90% of flows in 4.78 ms (P99 6.16 ms) on a Raspberry Pi 4B; only ambiguous flows escalate to retrieval at the base station. +16% F1 over the strongest baseline under mobility-induced drift. IEEE EDGE 2026.
