Good AI governance is not a policy library. It is the ability to reconstruct what the system did, which evidence it used, who exercised judgment, and what happened after release.

The useful control sits as close as possible to the consequential decision. Central teams set the standard. Workflow owners produce the evidence.