Identify the LLM provider and model version - Map the application's functionality and tool integrations - Understand what data the LLM has access to - Identify input/output validation mechanisms