Capital programs appear “under control”—until they don't. Owner-side governance, cost exposure, and risk.