{[
{l:'Multi-factor authentication', d:'Require MFA for all users. Currently: TOTP + hardware key optional.', on:true},
{l:'External sharing', d:'Documents may be shared with @gov.in, @nic.in domains only.', on:true},
{l:'Data loss prevention', d:'Scan and block Aadhaar, PAN, and bank account patterns in outbound files.', on:true},
{l:'Retention', d:'Records classified as "Official" retained 7 years, "Secret" retained 25 years.', on:true},
{l:'Watermarking', d:'All documents printed or exported carry a user-identifying watermark.', on:true},
{l:'AI training opt-out', d:'Workspace data is never used to train foundation models.', on:true, locked:true},
{l:'Legal hold', d:'When enabled, files under litigation cannot be deleted or altered.', on:false},
{l:'On-premise AI models', d:'Route AI inference to on-premise Karya-8B model rather than cloud.', on:true},
].map(p => (
{p.on?IC.check:IC.x}
{p.l}
{p.locked &&
{IC.lock} Locked by contract}
{p.d}
))}