The architecture of legal compliance depends on something more fundamental than policy guidance or industry codes of conduct. It depends on the legal structures that establish what is permissible, what is forbidden, and what penalties arise from non-compliance. These structures are not fixed documen