Input boundary
- Schema and size
- Identity and authority
- Data classification
- Prohibited-content rejection
REVIEW SURFACES
Technical checklists
Use these as questions for evidence. A checked box without a test, owner, or current record is not a gate.
Model boundary
- Versioned configuration
- Structured output
- Timeout and retry
- No direct side effects
Evidence boundary
- Source permission
- Citation visibility
- Missing-answer state
- Freshness and deletion
Action boundary
- Authorized actor
- Idempotency key
- Reversible queue
- Audit event
Operating boundary
- Failure categories
- Named alerts
- Change evaluation
- Manual fallback and exit