The third foundations layer: of everything in your Graph, what is Copilot actually allowed to use? Sensitivity labels, the EXTRACT usage right, label inheritance into generated content, and the precise list of questions to take to your compliance team.