Obligations: Companies must be cautious when using AI tools, not blindly trust or grant permissions to unknown AI services. They must set clear behavioral boundaries and strict permissions for AI agents, not casually open internet access or content editing rights.