Forget the AI frontier. Customers are pushing enterprises for more guardrails on AI already in use, and experience with PCI DSS provides a useful model. The regulatory honeymoon for AI is over. Recent disclosures have prompted conversations about slowing the frontier and mandating controls. One of the few areas of agreement is that controls should sit outside the models, with independent verification. What happens next is being debated, but regulators are moving. The European Union AI Act is…