Complete procedures with a way back.

Build a server-only OpenAI integration with project-scoped service accounts, tenant authorization, application quotas, project spend alerts, privacy-preserving audit events, retention controls, key rotation, and tested incident recovery.

Build a tenant-isolated Microsoft Teams assistant on the current Microsoft 365 Agents SDK with CloudAdapter JWT authentication, Microsoft Entra ID workload identity, durable activity idempotency, bounded read-only answers, Adaptive Card Action.Execute approvals, distinct app and user authorization, explicit admin-consent and resource-specific consent review, a separate dispatcher, and zero-downtime deployment.

Pin PostgreSQL 18 and pgvector 0.8.5, enforce tenant RLS, store one validated vector dimension, ingest idempotently, measure HNSW and IVFFlat against exact recall, and prove maintenance, PITR, restore and rollback.