Most of the PMOs we work with don’t have an AI governance problem because they lack policy. They have one because the policy that exists was written before anyone had deployed an actual agent — and nobody has gone back to check whether it survived contact with reality. This checklist is designed to be checked against what is actually running today, not what was approved on paper twelve months ago.