There are a lot of incumbents and start-ups building AI runtime governance layer. Was wondering if anyone actually sees adoption of runtime governance layers despite the chatter around the need for it?

I can't seem to wrap my head around the moat for such a product given that it is a fixed set of rules which is not proprietary in nature. Am I looking at this space with the wrong lenses?

I see how its solves the problem of accountability for risk and compliance teams but I do not see how this is defensible as a standalone business.