Don't be someone's dumb pipe

The enterprise AI governance race isn't about compliance. I went looking to see why these companies are actually talking this up. For the press, AI governance is a boring compliance story — audits, kill switches, making sure agents follow the rules. But if you look at the actual moves ServiceNow, Microsoft and Salesforce are making, something more interesting is happening. These companies are all facing the same nightmare. They risk becoming dumb pipes, the middleman plumbing data around while the real power stays with the LLM providers. They don't own the control plane, OpenAI and Google own the intelligence layer, AWS owns the infrastructure, and the enterprise software vendors become irrelevant billing systems in the middle. Staking a claim on the governance layer is their moat. That's not compliance. That's survival. Here's the pattern I noticed in the primary sources: The kill switch buy: ServiceNow acquired Traceloop for $80M in March 2026 — runtime observability for AI agents. The stock was at $120 on its way to $83. The market wasn't rewarding the thesis. Management bought anyway. The control plane play: ServiceNow connected AI Control Tower to Amazon Bedrock AgentCore, one governance layer over every AI agent an enterprise builds on AWS regardless of which model runs underneath. Nine partners announced integrations in ten days. Cognizant this week layered their Guardian agents on top. Three vendors, one workflow, multiple meters running simultaneously. Selling the lock before finishing the door: AI Control Tower hits general availability in August 2026. The governance layer being sold to enterprises right now isn't fully shipped. The Cognizant partnership announced this week is operationalizing a platform that hits GA in ten weeks. The chaos underneath: Bernstein flagged that Salesforce couldn't cleanly explain whether Agentforce revenue comes from stand-alone, embedded or unlimited credit tiers. NIST is still writing the AI agent security framework. The EU