A draft change to Italy’s corporate liability rules signals that AI governance, security, and documentation may soon be treated as operational evidence, not just policy language.