In the context of AI Supply Chain risk, what is the primary governance objective when evaluating a vendor's AI model transparency?