A security review fails when the acceptance condition is unwritten. Six evidence items define data pipeline security for a tool that moves PII, and Extract publishes answers to most of them.
When an AI agent drafts Salesforce changes, separation of duties lives or dies at one handoff. A worked example shows how a reorganisation quietly turns approvers into authors, and the signal that warns you first.
A pipeline budget handoff only works if finance can write down a worst case. Monthly active rows pricing makes that hard; published credit tiers make it a lookup.
When an admin leaves or a team is reorganised, the receiving role inherits the Salesforce change history only if it lives somewhere that role already has access to. Here is how to test that before the reorg.