Brief AI procurement risk from vendor controls, data use, model transparency, lock-in, and audit rights