For those who decide
The Groundwork
The enterprise framework for AI. CTO / CIO altitude — written for sharp people, not for a board deck.
AI is an operating decision before it is a technology one.
010203040506
Operating Model & Maturity
From Experimentation to AI Factory — how to get there.
Build · Buy · Boost
The decision that actually matters, plus the build-to-learn vs build-to-run trap.
Token Sourcing as a Commodity
Multi-provider as a principle. The gateway, not the vendor, is the strategy.
Security Architecture
The AI gateway, Citadel-style isolation, and prompt injection as the live threat.
Governance & Risk
A scaffold that survives the EU AI Act, NIST AI RMF, and a real incident.
FinOps for AI
Per-token attribution, caching, routing — unit economics that hold at scale.
Worked example — Prompt Injection
Pillar III · The Craft
Understand the attack
The practitioner learns how injection works, why instruction/data separation matters, and how to wire layered defences into the harness.
Pillar II · The Operating Model
Decide who can wire it
The org decides which tier of builder may connect agents to sensitive tools, and how the Agent Catalog risk-tiers those agents.
Pillar I · The Groundwork
Set the policy and the gateway
The enterprise mandates the AI gateway, the classifier on every input path, and the governance answer to a live incident.