Settle the data boundary before the assistant
Write down which documents the assistant may read, how long prompts are kept, and who can turn the system off. A pilot that skips this becomes a production incident later. If you cannot name the boundary, you do not have an implementation yet. You have a demo.