Govern AI-generated code through approved tools, access limits, test execution, static analysis, secure coding checks, reviewer approval, CI/CD controls, and traceability from ticket to release.