The prompt is a new leakage boundary
A Salesforce report or UI can enforce permissions at render time. An LLM prompt is different: once the context is assembled, the model can use every token it sees.
AIGIS treats prompt construction as the critical control point. Data that fails Salesforce object, record, or field checks is not included.