Scoped to hold nothing
Our default deployment answers, qualifies and hands over. It reads no customer records, writes to no core system and stores no account data. Where an engagement genuinely needs system access, that is a separate, explicitly scoped phase with its own review. Never the starting point.