AI policies largely focus downward: staff misuse, data leakage, unauthorised tools. Yet accountability frameworks sits with leadership.