LLMs can draft and cross-check policies, yet still require human review loops and guardrails to keep regulators comfortable.