PII Boundary

Do not let private names, messages, credentials, or payment-like details cross into generated docs or public responses.

Active launch gate

Control Posture

• Keep this risk visible before production launch.
• Prefer explicit gates over implied readiness.
• Re-check after each generated board sync.