When an internal AI tool outlives its creator, the real danger is not the model itself but the access it may still hold.