Establish privacy, governance, accessibility, and responsible-AI controls

[glowkeeper]

Translate the project principles into testable product and operational controls.

Deliverables

• Data-minimisation and retention requirements
• Provider, model, prompt, and deployment governance controls
• Accessibility requirements for core workflows
• Transparency, human oversight, and incident-handling requirements

Done when

Controls are explicit, testable, and avoid unsupported compliance claims.