AI governance that works in daily operations: build an AI registry, risk-based controls, meaningful human oversight, vendor reviews and clear ownership.