As AI becomes core banking infrastructure, model governance is shifting from periodic validation to continuous assurance. Who should audit the algorithms?