AI policies focus on models, ethics, privacy, but many neglect the invisible governance layer that operationalizes those policies.