A request should enter an accountable follow-up process that preserves the selected intent, permission to respond, the company problem, and an owner. The next action may be clarification, a fit discussion, package education, an audit recommendation, an update path, or a decision not to proceed. The record should not be promoted to customer, accepted participant, opportunity, or revenue state without the evidence required for that later status.
The first response should improve the definition of the decision rather than manufacture urgency. It may ask which workflow is in scope, what currently breaks, who owns it, which sources matter, and what authority must remain human. Sensitive data, connector access, credentials, or production permissions should not be requested merely because a person expressed interest. Those requirements belong to a separately justified and governed discovery or implementation stage.