Ensuring that data subject to a residency or sovereignty constraint — PHI that cannot leave premises, ITAR-controlled technical data — is never routed to an external processing endpoint, including an external LLM API, regardless of what the requesting prompt asks for.