Model use policies, training data provenance and rights clearance, vendor diligence, and the disclosure obligations that come with deploying automated systems.