Enterprise LLM Governance: Your Model Is a Compliance Risk Until Proven Otherwise