Roadmap: Expand Compliance Guard to cover external sharing and DLP policies

[afkpal]

Summary

Broaden the Compliance Guard to evaluate external sharing requests and Data Loss Prevention (DLP) policy changes against client-specific rules, in addition to the current account/mailbox/Conditional Access checks.

Why

For wealth management and financial advisory firms, external sharing and DLP are common sources of compliance exposure. Adding these to the Compliance Guard widens the safety net before sensitive data leaves the tenant.

Acceptance criteria

• Compliance Guard recognizes external-sharing and DLP-change intents
• Returns verdict + reasoning + required approval + safe steps
• References client archiving/retention vendor (e.g. Global Relay, Smarsh, Redtail) where relevant
• Flags any action that could violate SEC/FINRA recordkeeping

Notes

Keeps the grounded, no-hallucination design: all rules come from verified SharePoint Client Profiles data.