The four functions — govern, map, measure, manage — are a vocabulary, not an implementation. This is the translation layer: how each becomes an obligation the system enforces at runtime rather than a heading in a report.
Govern
Ownership with teeth: a named accountable owner for every model in production, and a gate they cannot delegate away.
Map
Know what the system can and cannot be trusted to do — and encode the boundary, so the untrusted path is closed by construction.
Measure
Instrument the failure modes that matter, continuously, in production — not once, at assessment time.
Manage
The response is automatic where it can be and routed to a person where it must be. The point is that something happens — deterministically — when a threshold is crossed.