Measure AI workflow control coverage across approvals, monitoring, rollback, evidence, and access limits