A practical sequence for standing up governance, risk, and compliance work without alienating the engineering teams whose buy-in determines whether the program lives or…