Determine the minimum control level based on consequence, data sensitivity, and write authority.
Audit package: input context, evidence sources, model output, policy results, approver, final action, and outcome.