Why treating AI ethics as a compliance exercise misses the point — and what a more design-driven approach might look like.