Identify every input and authority
Start with the project brief and assign immutable identifiers to source assets, reference crops, prompt documents, style notes, and policy approvals. For each item, record origin, rights holder, license or permission, permitted transformation, geographic or channel limits, expiration, and responsible person. Do not collapse a mood board into one unlabeled upload: every reference needs a traceable decision. Verify that the authorized cloud account is suitable for the data classification before transfer. A social post is not authority for assets, privacy, service terms, or product capability.