You are defining transparency practices for a customer-facing assistant whose responses are materially shaped by AI.
Which transparency practice most directly supports responsible deployment?

• A. Disclose AI involvement to end users in line with the organization's transparency policy and provide a documented path to reach a human when needed.
• B. Refuse to answer any user question about how the responses were produced or whether AI was involved, treating the AI's role as confidential operational information.
• C. Disclose AI involvement only to internal staff and operators while withholding that information from the end users whose interactions are materially shaped by the AI system.
• D. Misrepresent the AI's role in producing responses in order to make the assistant feel more trustworthy or more human, undermining informed user consent and organizational transparency.

You are defining when to introduce a project subagent versus relying on Claude Code ' s general capabilities.
Which scenario most directly justifies a dedicated subagent?

• A. The team has no recurring specialized tasks and uses Claude Code only for isolated general-purpose work that does not justify a dedicated system prompt or tool scope.
• B. The team wants every Claude Code interaction to use the same generic system prompt with no task- specific specialization, narrow tool permissions, or dedicated model selection.
• C. The team has a recurring specialized task, such as database schema review, that requires a focused system prompt, narrow tool permissions, and a specific model selection across many sessions.
• D. The team has a one-time ad hoc question that will not recur and does not require a focused system prompt, narrow tool permissions, or dedicated model selection.

The compliance team at a firm has approved a Claude Skill that generates client-facing investment summaries. The Skill includes the firm's required disclaimers and prohibited-language list. A product manager has asked whether additional guardrails are needed at the application layer or whether the Skill alone is sufficient.
Which two guardrail responsibilities should remain at the application layer rather than the Skill? (Select two.) Each correct answer presents part of the solution.

• A. Apply the prohibited-language list that the compliance team maintains and updates.
• B. Log every generated summary to the firm's compliance audit trail for retention.
• C. Apply the disclaimer template that the compliance team has standardized firm-wide.
• D. Format output sections according to the firm's standardized house style guidelines.
• E. Verify the requesting user is authorized to generate investment summaries at all.

You are a platform architect designing an internal Claude-based assistant that serves both finance analysts and external auditors. Each population must access only documents permitted by its role.
Where should role-based access control be enforced in the pipeline?

• A. After the response is generated, by post-filtering content that should not have been retrieved.
• B. Nowhere in the pipeline; rely on the model's general refusal behavior to reject unauthorized document access without any enforced access control.
• C. Inside the system prompt as a natural-language instruction for Claude to ignore unauthorized documents.
• D. At the retrieval layer, before any role-restricted content reaches the prompt-construction step or the model.