Governing AI for compliance and enterprise trust