When banks, hospitals and logistics firms route decisions through a handful of foundation models, those models inherit critical-infrastructure status whether regulators say so or not. Poisoned training data or stolen weights now have sector-wide blast radius.
The dependency map nobody drew
Most organisations cannot list which of their processes call which model. Until that dependency map exists, AI risk management is guesswork wearing a governance framework.