For years, AI governance lived in the realm of intent. Organizations published ethical principles, formed review committees and pledged responsible use. That all changed in 2025.