A while back, when we were building towards maturity at Cox, I sat in one of our first AI Council reviews. Ten of us in the room: strategy, engineering, security, legal, product, infrastructure, data privacy, me.
Our finance partner asked a simple question. How many AI models are we running in production, and what do they cost us?
Ten people. Nine blank stares. Mine was one of them.
We were not negligent… we had a policy. Three pages, approved, circulated, filed. A good policy. It just could not answer the question, because a policy and a platform are not the same thing. A policy describes what people are allowed to do. Governance is the machinery that makes the allowed thing the easy thing, and it either lives in your production path or it does not.
Here’s why this is not a compliance footnote. Gartner expects more than four in ten agentic AI projects to be canceled by the end of 2027. These are real issues that can be solved by real people. These projects do not die in the lab. They die in the first budget review or the first incident, when nobody can answer four questions: what did it cost, who approved it, what did it touch, and can you prove it.
You cannot manage, measure, or defend what you cannot see. So visibility comes before control.
We spent months turning that blank stare into a framework: four disciplines that have to be in place before agents reach production, and the order to build them in. The surprising part is what they add up to. Each one produces a record, and together they become a queryable account of how your company uses AI, by team, by cost, by result. Nobody can sell you that. It compounds. It may be the most durable advantage you build in the next three years, and it starts the day you can finally answer finance (and that is when we all win).
I have time now… so I wrote it all down. The four cornerstones, the buyer’s checklists, the sequence, and the asset underneath. Link in the first comment.
Disclosure is needed: I advise TrueFoundry, but I was their customer first (this matters). The framework, and the scars, are mine. And those are shared with a team I will hold in high regard forever.
You cannot govern what you cannot see. Start with the pipe.
Referenced in the post
Analytics
We count visits with Google Analytics, which sets a cookie on your device. You can turn it off here or from the Cookies link in the footer, any time.