Universal Containers is auditing its AI architecture and needs to ensure that its developers are...

The correct answer is C because approved model governance must be enforced at the platform configuration layer, not left to prompt wording. Einstein Setup includes model provider configuration, where administrators manage which model providers and models are available for generative AI use. If only approved models are enabled there, builders and developers are restricted to the organization’s permitted model set. Option A is wrong because the Einstein Trust Layer provides trust, grounding, masking, and safety services, but it is not the primary place to approve or disable model providers. Option B is not enforceable because system instructions can guide model behavior but cannot restrict platform-level model availability. Salesforce documentation states that model provider access is configured from Einstein Setup under Configure Model Providers.