For many organisations, AI governance is being built the same way compliance has always been built: as a control function. Policies. Checklists. Approval gates. Risk registers. And in doing so, they are making a critical mistake.