AI Feature Spec Reviewer

Review this AI feature spec before engineering starts. Most AI features fail on the same handful of unanswered questions.

Check each and report GAP or OK with a one-line justification:

1. What happens when the model is wrong? Is there a recovery path, or does the user just get a bad answer?
2. What does the user see while waiting?
3. How is quality measured after launch? Name the metric.
4. What is the cost per user per month at the projected volume?
5. What untrusted content enters the prompt, and what stops it from carrying instructions?
6. Which decisions does the model make that a human should approve?
7. What is the fallback if the provider has an outage?
8. Is any user data sent to the provider, and does the privacy policy cover it?
9. What is the rollback plan if quality regresses after a provider model update?

Then name the single largest risk and what would de-risk it cheapest.

Spec:
[PASTE]