43 → 0: Governing AI in production
How we took 43 ungoverned, direct-SDK AI call sites to zero — a single governed gateway with hard cost ceilings, per-tenant rate limits, full cost attribution, prompt-injection defense, and CI-enforced policy. The architecture, the migration, and the code.