| G01blocking | Unclear business value | A written definition of what counts as a wrong answer for this workflow, agreed by the people who own the process. | A page naming the failure modes and, for each, what the correct outcome would have been — signed off by the process owner, not written by the project team alone. | typically a day, once the right two people are in a room |
|---|
| G02blocking | Inadequate risk controls | Read access to the system of record in a non-production environment, available today. | Working credentials against a non-production instance with representative data — not a promise that access can be requested. | typically a fortnight, and it is almost always the long pole |
|---|
| G03blocking | Inadequate risk controls | A named individual with authority to let the agent act without review, and the authority to stop it. | One person, named, who can both switch it on and switch it off. A committee is not an answer to this question. | typically a day, and the difficulty is political rather than technical |
|---|
| G04blocking | Inadequate risk controls | A rollback that does not require a vendor to execute. | A documented, rehearsed way for your own team to reverse what the agent did, without opening a support ticket. | typically a few days to write down, longer to rehearse |
|---|
| G05the one gate | Unclear business value | A measured baseline error rate for the humans doing this work today. | A number, from a sample somebody actually checked, for how often the current process gets it wrong. Not an estimate from memory. | typically a fortnight of sampling, and it is the single most valuable fortnight in the project |
|---|
| G06 | Unclear business value | At least 50 real historical items, with their correct outcomes, that could be used as an evaluation set. | Fifty real cases with the right answer attached — the minimum from which an evaluation harness can be built. | typically a week, assuming the outcomes were recorded at the time |
|---|
| G07 | Escalating cost | A number the CFO already believes for what this workflow costs today. | A cost figure that has survived finance once already. A number invented for the business case will be challenged exactly when you need it. | typically a week |
|---|
| G08 | Inadequate risk controls | A written escalation path for the case the agent gets wrong — who is told, how fast, what they can do. | A named recipient, a stated time, and a stated remedy. One page. | typically a day |
|---|
| G09 | Inadequate risk controls | Write access to the system of record, or a documented decision that the agent will only recommend. | Either the write path exists, or somebody has decided in writing that it will not — both are fine, ambiguity is not. | typically a fortnight if write access is needed |
|---|
| G10 | Inadequate risk controls | A named owner for the data the agent will read, who can grant access without a committee. | One person who owns the data and can say yes. | typically a day to identify, longer if the answer is nobody |
|---|
| G11 | Inadequate risk controls | An agreed retention and logging policy that covers model inputs and outputs. | A written policy stating what is logged, where it lives and how long it is kept — covering prompts and completions, not only application logs. | typically a week with legal |
|---|
| G12 | Escalating cost | A decision on what happens to the time the agent frees up, made by someone who owns that budget. | A written answer to 'and then what?' from the person whose budget the released hours sit in. Without it, the saving is a slide. | typically a day, and it is usually the conversation nobody wants to have |
|---|
| G13 | Escalating cost | Somebody who will still own this system in twelve months. | A named owner with a role that survives the project. An unowned agent is a liability with a monthly bill. | typically a day |
|---|
| G14 | Unclear business value | A test environment where a failure costs nothing. | Somewhere the agent can be wrong repeatedly without touching a customer, a payment or a patient. | typically a fortnight |
|---|
| G11aregulated swap | Inadequate risk controls | A reproducible reasoning trace, sufficient to answer a regulator's question of why the system decided that. | A stored, replayable record of the inputs, retrieved evidence and intermediate decisions behind any single output — reproducible months later, not a log line. | typically designed in, not added later |
|---|
| G11bregulated swap | Inadequate risk controls | A validation and change-control procedure the agent will be brought under. | The existing procedure your regulated systems already follow, with a written decision on how a model-driven system enters it. | typically a fortnight with quality and regulatory affairs |
|---|