Why AI governance for lawyers needs judgement, not rules