Dimension 1: Decision Rights¶
Synchronized from the canonical website on 2026-09-06.
“If someone wants to spin up a small pilot, who do they have to ask? If the answer is 'three committees and nine months,' they'll build in the dark.”
← Shadow AI Proliferation · Velocity
Trust link → RIST™ institutional trust. See Leadership Delta D5, Change Agility P3.
STANDARDS — ENACTED GOVERNANCE¶
Governance Speed Standard¶
The approval architecture must be faster than the workaround. Gravitee: 81% of teams actively deploying, only 14.4% with full approval. If governance takes months and an agent takes an afternoon, people build in the dark. Governance speed is a design choice.
AI Governance Circle Protocol¶
Sprint-based governance cadence: decision rights reviewed, contested, and reallocated in response to conditions on the ground — not committee cycles that move at institutional speed while agents multiply at machine speed.
Shadow AI Integration Path¶
The standard is not “stop shadow AI” — that ship has sailed. The standard: a clear, fast path from shadow to sanctioned. Detection → assessment → integration, not detection → punishment → repeat.
MEASURES — THREE-LAYER ASSESSMENT¶
Self-Report¶
“If you wanted to launch a small AI pilot tomorrow, who would you ask? How long would it take?” Diagnostic: “I don't know” or “months” = espoused governance. “I'd just build it” = failed governance.
Evidence Layer¶
Pilot request → approval time (target: <2 weeks for low-stakes). Shadow AI ratio: sanctioned / total agents. Governance Circle cadence logs. Governance modifications in last 90 days.
Behavioral Observation¶
Do people go through governance or around it? Key ratio: formal requests vs. informal deployments. If governance channels are quiet but AI usage is growing, governance is being routed around — a design problem, not a people problem.