BEFORE LOADING FILES
[ ] Use only a company-approved AI or repository environment.
[ ] Confirm the data classification permitted in that environment.
[ ] Exclude passwords, private keys, production credentials, and authentication tokens.
[ ] Exclude privileged legal advice unless the approved process explicitly permits it.
[ ] Exclude personal, medical, employee-relations, and restricted data not needed for the engagement-control purpose.
[ ] Record restricted but relevant documents in the source manifest and route them to a human reviewer.
[ ] Apply least-privilege access to the workspace.
[ ] Confirm retention, deletion, export, and audit-log controls.

BEFORE APPROVING OUTPUTS
[ ] Every material field has a source citation.
[ ] Every inference is labeled.
[ ] Conflicts remain visible.
[ ] Missing information was not converted to none.
[ ] Supplier and engagement records are not conflated.
[ ] Financial totals reconcile where possible.
[ ] Legal, security, privacy, tax, employment, and regulatory questions are routed to qualified reviewers.
[ ] A named engagement owner approved corrections in decision_log.csv.
[ ] Only approved records are promoted into the operating system of record.