Generated Compliance Is Not Compliance

A governance layer that can be satisfied by the thing it governs isn't constraining anything. Three failure modes that share the same structure.