AI policies aren’t enough; without clear ownership and decision rights, governance falls apart the moment something goes wrong.