The public sector is being encouraged to embrace AI. But can the largely voluntary governance framework we’re building to manage the technology be trusted to work?