The guidance gives CISOs a way to press vendors on AI transparency, but analysts say the hard part will be proving that ...