If you cannot measure AI security, you cannot improve it. Learn which metrics actually reflect control strength instead of vanity statistics.