Give every team exactly the models they need (and nothing more)

Approved Models set the org floor. Access Lists narrow it per team or per key. Expiring keys enforce rotation. Together they give platform engineers a governance stack that scales from 3 people to 300 without a single Slack argument about who broke prod.