Boards approve CEOs, rank risks, and allocate billions — then say nothing. A new proposal: require boards to sign a BD&A on ...