The retained source is thinner than the argument it points at, but the useful part is the custody problem around AI-assisted code. It keeps circling human ownership, tests, clear intent, and tight feedback loops, which is about as glamorous as a sign-off sheet and usually where the bad rollout starts.