Picture this: your company spins up an AI model that can summarize support tickets, forecast sales, or even generate release notes. Impressive. But that same automation requests data, reads logs, and touches production records. Somewhere in those queries sit customer emails, AWS keys, maybe a patient ID. One slip, one