56. Governance, risk, and regulation

Apply risk frameworks, impact assessments, audit trails, model documentation, access controls, and human oversight. Map systems to relevant laws, sector rules, organizational accountability, and changing requirements such as the EU AI Act.