Why do AI policies fail in practice?

They are written separately from the systems people use every day. Governance has to show up in tooling, review flows, and deployment checks.

What should governance teams measure?

Model usage, high-risk workflows, exception approvals, review latency, and incidents. Those numbers tell you whether the policy is real.