First-principles governance and risk management for AI systems, using current frameworks and regulations as worked examples.