You are listing characteristics of robust guardrail design for an enterprise deployment.
Which two characteristics belong on the list? (Select two.)
Each correct answer presents a complete solution.

• A. Adversarial-input coverage in the evaluation set with regression tracking on guardrail performance.
• B. Centralized log retention for guardrail violations with quarterly review by the security team.
• C. Periodic refresh of the system prompt wording to keep refusal language current and clear.
• D. User feedback channels that route reported guardrail failures into the product backlog for triage.
• E. Per-role tool allow-lists enforced at the orchestration layer before any tool call executes.

A research summarization assistant has been deployed for six months. A user has flagged that a generated summary contained a fabricated citation. The product team has asked whether the incident requires architectural action or whether it is an isolated case.
Which two Diligence-competency actions should you take? (Select two.)
Each correct answer presents part of the solution.

• A. Disable the assistant immediately for all current users without any prior diagnostic analysis.
• B. Treat the incident as an anecdotal isolated case and take no further investigative action.
• C. Communicate to users that the assistant does not fabricate output as a matter of design.
• D. Sample recent summaries to estimate the fabrication frequency across the population.
• E. Review whether citation-grounding controls exist anywhere in the current generation pipeline.

You are transitioning a Claude-based deployment from design into implementation.
Which handoff package most directly supports a clean transition?

• A. A verbal walkthrough conducted on the day of handoff with no written architecture overview, ADRs, component contracts, evaluation framework, runbooks, playbook, or known limitations.
• B. Architecture overview, ADRs, component contracts, evaluation framework with reference set, runbooks, on-call playbook, and known limitations.
• C. Source code alone with no integrating architecture overview, ADRs, component contracts, evaluation framework, runbooks, on-call playbook, or known-limitations register to support the delivery team.
• D. The most recent set of design presentation slides without component-level diagrams, interface contracts, an evaluation framework with a reference set, runbooks, or a known-limitations register.

You are evaluating an evaluation set used to score a Claude-based hiring-support tool. The set is drawn from one geographic region and one tenure band.
Which response is most appropriate?

• A. Continue using the narrow evaluation set drawn from one region and one tenure band because the existing benchmark scores are already high on that subset.
• B. Expand the evaluation set to cover the geographic regions and tenure bands the tool will serve, and rescore the system on the expanded set before broader release.
• C. Reduce the evaluation set further to a single demographic subgroup to simplify score interpretation, narrowing coverage rather than expanding it to match the intended user population.
• D. Discard all quantitative evaluation and replace it with qualitative impressions collected from a small, convenience-selected group that may not represent the tool's full user population.