Connecting email to Claude or ChatGPT is access, not model training. The real risk is agency. Write the rules before you flip the switch.