The enterprise GRC company is putting AI agents to work on evidence, vendors and policies. Its most revealing customer story begins with a CISO who wanted nothing to do with AI.