Salesforce / AIGIS resources

Salesforce record access for AI should be checked live.

Record visibility can change. A governed AI path should check current Salesforce access when context is being assembled.

Executive read

The short version, before the deep dive.

Object and field permission checks are necessary but not enough.

Record-level visibility should be evaluated at request time.

Denied records should be part of the provenance story.

The first proof workflow should make record differences visible.

Analysis

What matters

The live-access reason

A permission cache can help with stable metadata, but record visibility is too dynamic to treat as a stale fact.

For Salesforce workflows, AIGIS emphasizes live record access checks before any allowed context is assembled.

A useful demo case

Pick two users with different sharing visibility and ask the same governed question.

The audit evidence should show different context boundaries before the model response, not only different final wording.

Resource packet

Turn this into a review worksheet.

Evidence packet

Permission-Provenance Evidence Packet

Capture user context, system of record, enforcement tier, stripped fields, model route, response, hash marker, and fallback notes.

Salesforce is the production proof path. ServiceNow and SAP are design-partner co-development paths with asymmetric enforcement that must be disclosed in diligence.

Get the packet