Corporate AI use has become much more governed. But permission-based policies have little to do with managing the risk. "Do ...