| Low-risk draft, internal user, approved data only | Allow with normal review and usage logging. | Prompt/output sample, policy scope, user role and timestamp. | Product owner |
| Customer-facing answer, financial impact or operational commitment | Human approval required before release or action. | Reviewer name, decision, source documents and final approved output. | Business process owner |
| Uncertain source, missing citation, conflicting answer or hallucination risk | Block, rewrite or route to manual handling. | Failed output, reason code, remediation note and regression-test item. | AI assurance owner |
| Sensitive data, regulated workflow or cross-border processing question | Restrict pilot path until adviser or control owner review is complete. | Data category, region/subprocessor evidence, approval or open-risk entry. | Security, privacy or compliance owner |
| Repeated override pattern after launch | Escalate to model, workflow or policy change review. | Override trend, business impact, proposed change and go/no-go decision. | Operating committee |