Two voluntary AI standards are quietly becoming the line a court draws between reasonable and negligent. The NIST framework and ISO 42001 now carry legal and commercial weight, and the records that defend a claim are the same ones that compound an advantage. Here is where the exposure lands, and how to build the record before you need it.