I think most AI governance conversations stop too early.
Teams talk about dashboards, usage charts, and prompt capture. Those are useful, but they are not the same thing as a trustworthy record.
The harder problem is this: if someone asks you six months later whether a block of code was AI-generated, can you prove the record still means what it said when it was created?
That is why we added two things in LineageLens: a provenance hash chain and a signed AI BOM export.
