Detects OpenAI ChatGPT Enterprise audit events where a conversation is shared with parties outside the original participants. Sharing can expose prompts, completions, and attached files, creating a channel for data exfiltration. The rule watches the OpenAI ChatGPT Enterprise audit_log for action values of conversation_share and emits fields such as user.id, user.email, source.ip, conversation_id, shared_conversation_id, and action_privilege to support incident response and policy validation. It maps to exfiltration techniques and provides investigation guidance to determine audience intent, confirm policy alignment, and assess potential data exposure.