An approved model does not make an AI system accountable. The consequential behavior emerges from the model’s interaction with runtime context, retrieved data, tools, permissions, orchestration rules, and human approval controls. That changes the assurance target.