Description
- Baseline metrics to capture for every AI vendor endpoint and integration
- Anomaly indicators worth an alert (volume spikes, off-hours calls, unknown principals, token/cost surges)
- Response steps when an anomaly fires
- Template for documenting authorised AI traffic
