Financial services carries more overlapping AI rules than any other sector: model risk management, fair lending, prudential supervision, data protection, and now the EU AI Act. This playbook shows governance and risk leaders how to fold AI into the model risk inventory and three lines of defense, meet the 2 August 2026 high-risk deadline, and reuse the SR 11-7 tradition updated by SR 26-2.