TL;DR * AI governance tools fall into six categories: policy registries, model monitoring tools, data security controls, cloud provider consoles, AI gateways, and endpoint agents. Most enterprises need more than one of them. * Policy registries document AI risk and produce audit evidence, but they cannot stop a request in flight.