7. Configure Privacy, Content Exclusions, and Safeguards (10-15%)

The final content domain is about control: the settings and safeguards that let teams use Copilot without leaking sensitive code, ingesting public code they shouldn't, or shipping known-bad patterns — plus how to troubleshoot when Copilot doesn't behave as expected. Every mechanism here connects back to earlier phases: exclusions implement the data-protection ideas from Phase 4, duplication detection and security warnings are the proxy's post-processing from Phase 4 made configurable, and troubleshooting is the practical face of "Copilot is bounded, not broken."