Your AI copilots are writing code, querying data lakes, and shelling into infrastructure. They are helpful, dazzling, and occasionally reckless. One stray prompt and your model could leak an API key, delete an S3 bucket, or read a file it should never touch. Policy-as-code for AI AI governance framework exists