Route-aware evaluation, adversarial tests, prompt injection, least agency, sandboxing, fairness, incidents, and assurance.