The independence argument
An independent layer can evaluate the request before a vendor-specific assistant or model route becomes relevant.
That position helps security teams reason about permission evidence without tying the whole story to one vendor cloud.