Security Models reads and saves real lists; the chat picker's choice is the conversation's

The access-policy BFF passes AIService's answers through unchanged, so a refused save shows its own reason.

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.