AI coding agents moved from experiment to infrastructure faster than governance could follow. Claude Code isn’t a chatbot. It reads files, runs commands, and pushes to pipelines, often on machines next to privileged client data. Four governance gaps law firms are discovering too late, and a path to saying yes accountably.…