The credibility of AI governance requires an identifiable institution with the authority to stop a deployment, the independence to use it, and the technical capacity to justify it | Picture: Sourced from Magnific (www.magnific.com) and accessed on September 25, 2026.
In an article published by Fulcrum, Aditya Vikram Kashyap asserts that the credibility of AI governance in the region will be decided not by the volume of frameworks but by whether some identifiable institution has the authority to control a commercially or politically important deployment.
An AI system has passed its technical tests. It prices loans, or screens welfare applicants, or triages patients, and the organisation deploying it has good reasons for urgency: a competitor is ahead, a minister has announced a launch date, a budget cycle is closing. Somewhere in the organisation, or in a regulator’s office, sits a person whose job is to assess whether the system should go live.
Suppose that person concludes it should not. The grounds for that need not be exotic: errors that fall unevenly across the people the system sorts, performance that has drifted from the data it was validated on, refusals that cannot be explained to the person refused, a model that can be manipulated by someone who understands it, or stakes high enough that a mistake costs someone a benefit, a diagnosis, or a livelihood.
What happens next is the real measure of AI governance, and it is what Southeast Asia’s multiplying instruments leave unresolved. The region now has an ethics guide, a standalone national statute, a draft bill, a pending presidential regulation, and a sophisticated family of voluntary frameworks. Each answers the question “What should responsible AI look like?” Far fewer answer the query “Who decides, against whose objection, and with what consequence?”
This article argues that the second question is the one that matters, and that asking it produces a less tidy picture of the region than the usual inventory suggests. The distinction is between governance presence, meaning principles, committees, inventories, and approval processes; and governance effectiveness, meaning arrangements with enough institutional authority to change a consequential decision when compliance has become expensive. Presence is now abundant. Whether effectiveness exists, and where, is much harder to establish. Effectiveness is also broader than enforcement: enforcement follows a breach, while effectiveness includes the power to refuse, condition, or delay a deployment before it happens.
