How D2 handles client infrastructure, least-necessary access, and AI boundaries during workflow implementation.