Why not just start a DAO, give the AI to the DAO, then have the DAO only respond to commands from the AI?