List the allowed source classes, the fields or excerpts needed, their owners, refresh expectations, and permitted uses. Define which statements the workflow may make directly, which require an inference label, and which it must not make. A public press release can support a dated company announcement; it cannot establish an undisclosed budget, buying committee, or personal motivation.
Identity resolution deserves explicit review. Similar company names, subsidiaries, consultants, and role changes can attach evidence to the wrong account or person. The workflow should preserve source identity and flag ambiguous matches instead of merging them silently. Reviewers need a correction path that updates the operating record and prevents the same weak association from resurfacing.
Source terms and access methods also belong in the contract. A technically reachable page, feed, enrichment field, or exported list may carry restrictions on collection, retention, redistribution, automated access, or commercial use. The revenue team should involve privacy, legal, security, and platform-policy owners where appropriate rather than asking the workflow to infer permission from availability.