How to Build an AI-Assisted Workflow That Does Not Leak