Five Steps to Governed AI

Chapter Eight  /  Step Five

01
02
03
04
05

Operate


Your team approves what runs. The record assembles itself as a byproduct.

The proof assembles itself. Nobody types it after the fact.

Why it matters

Otherwise you spend as much time proving the work as doing it.

An agent that does useful work and keeps no record of it leaves you reconstructing that work later from email and memory. The reconstruction costs more senior time than the work saved.

What good looks like

The agent runs the process. It surfaces exceptions for human review. Your team approves what needs approval. Every action is logged with a timestamp, the data it referenced, the rule it applied, and the decision made. When someone asks, your board, a client, a regulator, an acquirer, the proof is already assembled. You share it. No scramble.

The agent does

The work, the logging, and the flagging of anything unusual.

Your team does

The judgment calls, and the approval that puts a name on the record.

That division is what makes the trail real. The agent cannot approve its own work. Your team cannot be asked to log it by hand.

Figure 8.1

The trail writes itself.

Monthly vendor payment run, 847 invoices. Nobody typed any of this.

09:00:04GROUNDEDAP system, invoice close 30 Jun, 847 invoices read
09:00:31MATCHEDPOs matched to invoices, 12 variance exceptions flagged
09:01:08CHECKED834 pass against R 2.1, R 3.4, R 5.0
09:01:08HELD13 invoices fail threshold or variance rules, routed for review
10:18:22APPROVEDM. Torres, VP Finance, 11 exceptions cleared with note
10:18:30EXECUTED845 payments queued to bank
10:18:31LOGGEDProof sealed, exportable
WHEN SOMEONE ASKS
“Show me the 13 exceptions and who cleared them.”
ALREADY ASSEMBLED
Line four and line five. Shared in the time it took to ask.

In your firm

Your board asks how you know the agent did what you said it would, on every payment, for the last six months. You have the work. You cannot show the working.

With the record running, you export it: every check timestamped, every exception flagged, every approval named. None of it was written after the fact.

Without the trail
Four people pulled off current projects. Three weeks reconstructing logic from logs and memory, ending in a deck that says “we believe.”
With the trail
One export. Every decision, the rule it applied, the data it saw. Board satisfied before lunch.
Who is pulled off
Nobody. The record does not live in anyone’s memory.

The work was done correctly. That is not the same as being able to show it.

Skip this step
No record. No human approval. No proof when someone asks.