Banking Internal Copilot: On-Prem + KVKK Audit-Log + Prompt Injection Red-Team

Internal copilot for Turkish banking (customer rep + ops team): on-prem (BDDK + KVKK mandatory), audit log (every query + response 7-year retention), prompt injection red-team (attacker tries to access customer data), Mistral Small 3 24B + air-gapped deploy.