Supply chain of models

You inherit the vendor’s incidents. Know the model ID, the region, the retention, and who can train on your prompts.

Pin versions. A silent upgrade is a change you did not review.

If a plugin can read your tickets, it is in your threat model even when the logo is friendly.