Is robots.txt enough for AI crawler governance?

No. Teams should also review meta robots, x-robots-tag headers, CDN rules, firewall settings, sitemap coverage, and server logs.