The demo works. ChatGPT lists three tools, calls one, and returns a tidy summary from your staging tenant. The product manager asks when it ships. Engineering asks what happens when the model calls delete_site on the wrong organisation. Legal asks where prompts, tool arguments, and responses are logged. Nobody has a shared checklist yet. That gap is why AIUC-1 matters even if you never pursue formal certification. The Artificial Intelligence Underwriting Company published a readable standard...