Architecture review points
Treat the AI runtime as middleware that must respect Salesforce's permission decisions before it composes context.
The review should include how the runtime authenticates, checks access, filters fields, and records provenance.