As AI moves from assisting spend decisions to acting on them, the governance question becomes urgent. What authority should the system carry, what controls define its boundaries, and what evidence should finance expect when it acts inside the workflow?