Security claims you can trace to a control.

Review RestrictAIChat data paths, access controls, policy enforcement, audit integrity, retention boundaries, and shared responsibilities.