Claude AI Compliance and Audit Prompts

I need to describe how AI agents in my product are contained, in language a regulator would accept. Interview me one question at a time until you have enough, then write the description.\n\nCover: what isolation boundary each agent runs inside, what network access it has, what credentials it can reach, what happens when it tries to exceed its boundary, who is alerted, and how that is logged.\n\nDo not write anything I have not told you. Where I cannot answer, mark it as a gap rather than filling it in.

List every place my AI deployment retains data, then test each one against my regulatory obligations.\n\nFor each store: what is kept, for how long, who can read it, where it physically sits, and under whose encryption keys.\n\nThen flag any case where the retention period exceeds what my obligations allow, and any case where a vendor rather than my organisation controls the key.\n\nMy obligations and deployment: {{context}}

I am evaluating a vendor claim about AI safety or containment. Help me separate what is verifiable from what is marketing.\n\nFor the claim below, produce:\n1. What exactly is being asserted, in plain terms.\n2. What evidence would be needed to confirm it.\n3. Whether that evidence is public, available on request, or absent.\n4. Three specific questions to send the vendor.\n5. What a weak answer to each would look like.\n\nClaim: {{context}}

Turn my notes on an AI incident into a record that would survive scrutiny.\n\nStructure: what happened, when it was detected and by whom, what the system did that it should not have, what data or systems were reachable, what was done within the first hour, what changed afterwards, and what remains open.\n\nUse only facts I supply. Where timing or scope is uncertain, write that it is uncertain rather than estimating.\n\nMy notes: {{context}}

Read the model licence below and tell me what it actually permits for my use case.\n\nAnswer in this order:\n1. Can I use this commercially, yes or no, and under what conditions.\n2. Are there user count, revenue or sector thresholds.\n3. What attribution or naming is required.\n4. What is prohibited outright.\n5. What happens to my obligations if I fine-tune and redistribute.\n6. Which clauses would a lawyer want to look at before I ship.\n\nMy use case: {{context}}\n\nLicence text: {{licence}}