When prompts model outputs and interaction logs become part of the data layer, what changes in how organisations manage risk and accountability?