A practical AI agent governance checklist for small teams: owners, access limits, approval gates, logging, vendor controls, and monthly reviews before agents touch business workflows.