Third-party AI assessment needs enforceable contracts for independence, access, and disclosure, not a credibility label.