AI Strategy, Risk Management Agency Is a Transfer of Decision Rights: How to Govern AI Agents Before They Govern Your Business