An AI system as a governed element: the unit that regulators, risk registers, and inventories talk about. Composition of the system (agents, models, tools, MCP servers) belongs to the agent and MCP models; those elements are themselves governable.