OpenAI File Search makes retrieval easy to demo, but production depends on cleaner documents, metadata, vector-store structure, expiry rules, and cost control.
A practical rollout guide for website AI chat and lead-capture bots: prompt-injection controls, tool permissions, validation, logging, and human handoff.
With ChatGPT apps and full MCP access rolling into workspace plans, the issue shifts from connectivity to governance: permissions, write actions, OAuth, review, and rollout.