Section 10

Questions for the leadership team and board

Which agents are running today, who owns and sponsors each one, what autonomy tier is it, and when was it last recertified?
What share of our model and tool traffic is governed by a single policy point?
Which system is the authoritative record for our agents’ inventory, identity and policy across Microsoft, AWS, Google and Salesforce?
What do we spend per resolved task, by use case, and is it falling?
What share of our AI spend can we attribute to an owner and a use case today?
Which phase of the plan are we in, and what value has each live use-case slice delivered against its business case?
Before any decision on roles or headcount, have we agreed which work stays human-led, which is AI-assisted and which AI-led, and why?
How quickly can we stop an agent or revoke its credentials?
If we switched off our most important agent today, who would take over its work, and when did we last rehearse that?
Can we prove who, or what, authorized a given action, and on whose behalf?
Could the people who approve our riskiest agent actions actually stop one in time, and when did we last prove it?
What happens by default when an approval expires or monitoring goes quiet?
Which agents passed evaluation before promotion to production?
Which recognized agentic threats does our design cover, and who owns the gaps?
If a model provider changed its pricing or suffered an eight-hour outage tomorrow, would our business halt?
Where does asymmetric cryptography protect our most sensitive data, and what is our plan for the 2030–2031 horizon?
Where can an agent’s action reach physical equipment, and what independent layer stops it if the agent is wrong?