An organization's AI operations team wants to implement a self-service model to allow data scientists to request access to production AI model deployment permissions via Microsoft Entra ID Governance. The request must trigger an automated security review that checks whether the requester has completed required AI security training. Which Microsoft Entra ID Governance capability supports this requirement?

A is correct because Microsoft Entra ID Governance access packages support custom approval stages that can include custom extensions (Logic Apps or Azure Functions) as approval steps. A custom extension can query an external training management system to verify whether the requester has completed the required AI security training, making it a condition of access package approval. B is incorrect because access reviews validate existing access, not approve new access requests; they cannot query external training systems as part of a new access request workflow. C is incorrect because lifecycle workflows automate tasks at specific life events (joiner, mover, leaver), not in response to self-service access requests for specific permissions. D is incorrect because Conditional Access authentication context enforces additional controls during authentication, not access request approval workflows.