A dual-track approach to AI security is emerging. OpenAI's 'Lockdown Mode' focuses on internal model safety—preventing the model from being used as a tool for exfiltration. Conversely, Cloudflare's 'AI Gateway' focuses on the economic and operational perimeter—imposing spend limits and identity-driven policies to prevent 'token-drain' attacks. This represents the shift from 'Model Security' to 'AI Governance,' where the goal is to control both the behavior and the cost of autonomous systems.