Design a RAG chatbot for a financial institution that answers only summary-of-services questions. It must give no financial advice, capture no PII, and survive jailbreak attempts. Where do the guardrails, human-in-the-loop, and audit trail go?