[{"data":1,"prerenderedAt":1750},["ShallowReactive",2],{"site-nav-content":3,"blog:/blog/four-pillars-of-an-enterprise-ai-platform":179,"blog-index-copy":1037,"blog:/blog/four-pillars-of-an-enterprise-ai-platform:surround":1058,"hiring-banner-content":1719,"site-cta-content":1731},{"header":4,"productNav":9,"nav":42,"footer":61,"askAI":132,"id":163,"title":164,"archived":165,"authors":166,"badge":166,"body":167,"date":166,"definedTerm":166,"department":166,"description":171,"extension":174,"eyebrow":166,"faqHeader":166,"faqs":166,"footerBand":166,"headline":166,"image":166,"industry":166,"jobType":166,"listed":131,"location":166,"navigation":131,"openRoles":166,"pageLayout":166,"path":175,"relatedHeading":166,"seo":176,"series":166,"sitemap":165,"status":166,"stem":177,"subhead":166,"tags":166,"video":166,"whyJoin":166,"workplaceType":166,"__hash__":178},{"productLabel":5,"loginLabel":6,"contactLabel":7,"contactSalesLabel":8},"Product","Log in","Contact","Get started for free",[10,14,18,22,26,30,34,38],{"label":11,"to":12,"description":13},"Overview","/overview","Seven layers. One closed loop.",{"label":15,"to":16,"description":17},"Conflux","/product/conflux","Where your team, workstreams, and agents meet.",{"label":19,"to":20,"description":21},"Agent Teams","/product/agent-teams","Specialist teams - governed from day one.",{"label":23,"to":24,"description":25},"Lifecycle Graph","/product/lifecycle-graph","Intelligence that compounds across every interaction.",{"label":27,"to":28,"description":29},"Company Wiki","/product/wiki","Playbooks and policies where expertise stays.",{"label":31,"to":32,"description":33},"Workstreams","/product/workstreams","From brief to signed-off deliverable on one canvas.",{"label":35,"to":36,"description":37},"Perception Console","/product/perception","Ask your whole business in plain English.",{"label":39,"to":40,"description":41},"Governance","/product/governance","Frontier AI you can actually sign off on.",[43,46,49,52,55,58],{"label":44,"to":45},"Models","/models",{"label":47,"to":48},"Pricing","/pricing",{"label":50,"to":51},"Integrations","/integrations",{"label":53,"to":54},"Security","/security",{"label":56,"to":57},"Partners","/partners",{"label":59,"to":60},"Insights","/blog",{"productHeading":5,"companyHeading":62,"resourcesHeading":63,"legalHeading":64,"docsLabel":65,"docsUrl":66,"statementLines":67,"copyright":70,"companyLinks":71,"resourcesLinks":86,"legalLinks":102,"socialLinks":109,"bottomLinks":119},"Company","Resources","Legal","Docs","https://docs.gonimbus.ai",[68,69],"Stop training someone else's model.","Control your AI.","© 2026 Nimbus Intelligence, Inc. All rights reserved.",[72,73,74,75,76,78,81,84],{"label":47,"to":48},{"label":50,"to":51},{"label":53,"to":54},{"label":59,"to":60},{"label":77,"to":57},"Partner Program",{"label":79,"to":80},"Careers","/careers",{"label":82,"to":83},"System status","/status",{"label":7,"to":85},"/contact",[87,90,93,96,99],{"label":88,"to":89},"Glossary","/glossary",{"label":91,"to":92},"Compare","/compare",{"label":94,"to":95},"Evaluate","/evaluate",{"label":97,"to":98},"Problems","/problems",{"label":100,"to":101},"Use cases","/use-cases",[103,106],{"label":104,"to":105},"Terms of Service","/terms",{"label":107,"to":108},"Privacy Policy","/privacy",[110,113,116],{"label":111,"href":112},"LinkedIn","https://www.linkedin.com/company/gonimbusai/",{"label":114,"href":115},"X","https://x.com/gonimbusai",{"label":117,"href":118},"Instagram","https://www.instagram.com/gonimbus_ai/",[120,122,124,127,128],{"label":121,"to":105},"Terms",{"label":123,"to":108},"Privacy",{"label":125,"to":126},"Compliance","/compliance",{"label":82,"to":83},{"label":129,"to":130,"external":131},"LLMs.txt","/llms.txt",true,{"text":133,"prompt":134},"Ask AI about Nimbus",{"I'm researching enterprise intelligence platforms and want to know how Nimbus combines perception, collaboration, and autonomous agents to drive strategic decision-making":135,"platforms":137},{" Summarize the highlights from Nimbus's website":136},"https://gonimbus.ai",[138,143,148,153,158],{"name":139,"label":140,"icon":141,"hrefPrefix":142},"chatgpt","ChatGPT","simple-icons:openai","https://chatgpt.com/?prompt=",{"name":144,"label":145,"icon":146,"hrefPrefix":147},"perplexity","Perplexity","mdi:magnify","https://www.perplexity.ai/search/new?q=",{"name":149,"label":150,"icon":151,"hrefPrefix":152},"grok","Grok","simple-icons:x","https://x.com/i/grok?text=",{"name":154,"label":155,"icon":156,"hrefPrefix":157},"claude","Claude","simple-icons:anthropic","https://claude.ai/new?q=",{"name":159,"label":160,"icon":161,"hrefPrefix":162},"google-ai","Google AI","simple-icons:google","https://www.google.com/search?udm=50&aep=11&q=","content/shared/nav.md","Site navigation",false,null,{"type":168,"value":169,"toc":170},"minimark",[],{"title":171,"searchDepth":172,"depth":172,"links":173},"",2,[],"md","/shared/nav",{"title":164,"description":171},"shared/nav","1dD7ahDRl0SQ4hz53-kKo0tEFrGaLuaztZ3PPfp6a9k",{"id":180,"title":181,"archived":165,"authors":182,"badge":185,"body":187,"date":1011,"definedTerm":166,"department":166,"description":1012,"extension":174,"eyebrow":166,"faqHeader":1013,"faqs":1016,"footerBand":166,"headline":166,"image":166,"industry":166,"jobType":166,"listed":165,"location":166,"navigation":131,"openRoles":166,"pageLayout":166,"path":1029,"relatedHeading":166,"seo":1030,"series":1031,"sitemap":131,"status":166,"stem":1032,"subhead":166,"tags":1033,"video":166,"whyJoin":166,"workplaceType":166,"__hash__":1036},"content/blog/four-pillars-of-an-enterprise-ai-platform.md","The Four Pillars of an Enterprise AI Platform",[183],{"name":184,"to":136},"Nimbus Research",{"label":186},"Architecture",{"type":168,"value":188,"toc":1000},[189,216,219,227,241,246,251,254,276,288,291,306,309,312,316,325,346,349,379,381,392,400,403,441,444,448,457,477,503,506,545,553,570,578,581,601,609,613,622,634,637,663,670,675,689,697,701,704,744,750,753,787,790,798,802,808,818,828,848,859,863,911,914,924,928,956,963,975,979,993,996],[190,191,192,193,197,198,197,201,204,205,207,208,215],"p",{},"An enterprise AI platform is easier to score when you split it into four operator-facing pillars: ",[194,195,196],"strong",{},"Communication",", ",[194,199,200],{},"Collaboration",[194,202,203],{},"Automate",", and ",[194,206,39],{},". ",[209,210,214],"a",{"href":211,"rel":212},"https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai",[213],"nofollow","McKinsey’s 2025 State of AI"," keeps showing high usage and uneven scale. Scale fails when those four jobs are sold as four disconnected tools — a copilot here, a personal automation chain there, a policy PDF elsewhere — with no shared job object.",[190,217,218],{},"This page is category language you can use in an RFP. It is not a model catalog. It is not a vendor brochure. The four pillars are a pattern for how departments finish work together without a personal-account workaround.",[190,220,221,222,226],{},"For the kernel metaphor — process isolation, permissions, durable state — read ",[209,223,225],{"href":224},"what-is-an-enterprise-ai-operating-system","what is an enterprise AI operating system"," once. That article is the OS layer. This article is the product map sitting on top: what you configure, what you open Monday morning, what audit asks for. You do not need both frames in every meeting. You do need to know which one you are using.",[190,228,229,234,235,240],{},[209,230,233],{"href":231,"rel":232},"https://www.nist.gov/itl/ai-risk-management-framework",[213],"NIST’s AI Risk Management Framework"," — Govern, Map, Measure, Manage — is the public-sector cousin of the same idea. ",[209,236,239],{"href":237,"rel":238},"https://www.iso.org/standard/81230.html",[213],"ISO/IEC 42001"," is the management-system cousin. Neither standard names these four pillars. Both assume you can point at context, actors, actions, and records. The pillars are how those assumptions show up as products operators can touch.",[242,243,245],"h2",{"id":244},"pillar-1-communication","Pillar 1 — Communication",[190,247,248,250],{},[194,249,196],{}," is how context enters the company — mail, meetings, files, threads — attached to work instead of trapped in personal inboxes.",[190,252,253],{},"Why it is a pillar, not an app feature:",[255,256,257,264,270],"ul",{},[258,259,260,263],"li",{},[194,261,262],{},"Context is the input"," to every downstream job. A renewal without the thread is a guess. A close pack without the statement version is a dispute waiting for Thursday.",[258,265,266,269],{},[194,267,268],{},"Personal mail is not a system of work."," Forwarding a contract to a consumer model breaks roster, retention, and sign-off. The model may be capable. The path is not.",[258,271,272,275],{},[194,273,274],{},"Files need lineage"," — which attachment ran, which version, which run page cites it. Without lineage, Automate cannot tell two drops apart, and Governance cannot reconstruct Tuesday.",[190,277,278,283,284,287],{},[209,279,282],{"href":280,"rel":281},"https://www.microsoft.com/en-us/worklab/work-trend-index",[213],"Microsoft’s Work Trend Index"," has spent years documenting how much decision context still lives in mail and meetings. Your platform should meet people there, then ",[194,285,286],{},"lift"," context onto jobs. Meeting people in mail without lifting is how you get a smarter inbox and the same ungoverned work.",[190,289,290],{},"Operator tests:",[255,292,293,296,303],{},[258,294,295],{},"Can I open a thread and see which job object owns it?",[258,297,298,299,302],{},"Can a standing order start when a ",[194,300,301],{},"file lands"," in the communication layer — not only in a personal drive?",[258,304,305],{},"Does search respect the same scopes as writes? A search box that sees more than the writer may write is a leak, not a feature.",[190,307,308],{},"Without Communication, Collaboration becomes upload-and-pray. Automate triggers on paths operators do not use. Governance is asked to sign artefacts nobody can find. The pillar looks “soft” in an architecture review because it resembles email. It is not soft. It is the intake.",[190,310,311],{},"Communication fails when the company buys another inbox, when files live in a drive that has no job identifier, or when meeting transcripts are stored as personal artefacts. It also fails when “we have a connector” is treated as lineage. A connector that can read mail is not the same as a thread bound to a job.",[242,313,315],{"id":314},"pillar-2-collaboration","Pillar 2 — Collaboration",[190,317,318,320,321,324],{},[194,319,200],{}," is multiple roles — and, when useful, multiple agents — on ",[194,322,323],{},"one job object"," with a roster, a brief, connectors, and a finish line.",[190,326,327,328,332,333,336,337,341,342,345],{},"This is ",[209,329,331],{"href":330},"what-is-collaborative-ai","collaborative AI",", not “everyone has a copilot.” The controller, the FP&A partner, the RevOps manager, and counsel share an artefact; a model may draft; a ",[194,334,335],{},"named person"," signs; the trail stays. The host object is the ",[209,338,340],{"href":339},"what-is-an-ai-workstream","workstream",": one job, one scope, one budget, one record that survives the session. People and agents join ",[194,343,344],{},"that"," room — not a net-new channel per project.",[190,347,348],{},"Why Collaboration is its own pillar:",[255,350,351,357,373],{},[258,352,353,356],{},[194,354,355],{},"Roles must not collapse."," Draft ≠ approve ≠ post. If the same identity can do all three, you have a shared document with better formatting.",[258,358,359,362,363,367,368,372],{},[194,360,361],{},"Agents are teammates with grants",", not god accounts. See ",[209,364,366],{"href":365},"how-to-evaluate-collaborative-ai","how to evaluate collaborative AI"," and ",[209,369,371],{"href":370},"how-to-evaluate-an-agent-harness","how to evaluate an agent harness",".",[258,374,375,378],{},[194,376,377],{},"Guests exist"," — business-unit finance, outside counsel — without handing them ERP keys. A platform that cannot host a guest will push that guest into email, which is how the trail leaves.",[190,380,290],{},[255,382,383,386,389],{},[258,384,385],{},"Can two departments share a job without sharing every connector?",[258,387,388],{},"Can I see who is on the roster and what each role may do?",[258,390,391],{},"Does an agent’s output land on the job, not in someone’s private chat?",[190,393,394,395,399],{},"Collaboration without Governance is a shared folder. Collaboration without Automate still re-prompts Monday’s close from memory. Collaboration without Communication starts every job with “please upload the thing.” ",[209,396,398],{"href":397},"multiplayer-ai-and-multi-agent-ai","Multiplayer AI and multi-agent AI"," is the adjacent vocabulary: several people is not the same problem as several models.",[190,401,402],{},"Department depth, as educational patterns rather than product tours:",[255,404,405,411,417,423,429,435],{},[258,406,407],{},[209,408,410],{"href":409},"collaborative-ai-for-finance-and-planning","Collaborative AI for finance and planning",[258,412,413],{},[209,414,416],{"href":415},"collaborative-ai-for-revenue-operations","Collaborative AI for revenue operations",[258,418,419],{},[209,420,422],{"href":421},"collaborative-ai-for-legal-and-compliance-review","Collaborative AI for legal and compliance review",[258,424,425],{},[209,426,428],{"href":427},"collaborative-ai-for-operations","Collaborative AI for operations",[258,430,431],{},[209,432,434],{"href":433},"collaborative-ai-for-human-resources","Collaborative AI for human resources",[258,436,437],{},[209,438,440],{"href":439},"collaborative-ai-for-customer-support","Collaborative AI for customer support",[190,442,443],{},"Use those pages to see how the same roster pattern changes by function. Do not use them as a substitute for the operator tests above.",[242,445,447],{"id":446},"pillar-3-automate","Pillar 3 — Automate",[190,449,450,452,453,456],{},[194,451,203],{}," is repeat work compiled into ",[194,454,455],{},"standing orders"," — triggers, recipes, run pages — not endless chat re-runs.",[190,458,327,459,463,464,367,468,472,473,476],{},[209,460,462],{"href":461},"what-is-loop-engineering","loop engineering",". See ",[209,465,467],{"href":466},"six-things-that-start-a-loop","six things that start a loop",[209,469,471],{"href":470},"loop-vs-workflow-vs-agent","loop vs workflow vs agent"," for the nouns. Standing-order loops are how the platform ",[194,474,475],{},"remembers"," what worked:",[255,478,479,485,491,497],{},[258,480,481,484],{},[194,482,483],{},"Triggers"," — schedule, file, data change, drop, ping, run now",[258,486,487,490],{},[194,488,489],{},"Skip when nothing changed"," — quiet outcomes recorded",[258,492,493,496],{},[194,494,495],{},"Run page"," — what ran, skipped, produced, notified",[258,498,499,502],{},[194,500,501],{},"Optional model steps"," for messy reads — bounded, then back to deterministic paths",[190,504,505],{},"Disambiguation operators need, because vendors will not do it for you:",[255,507,508,514,525,535],{},[258,509,510,513],{},[194,511,512],{},"Loop"," — standing order (this pillar)",[258,515,516,519,520,524],{},[194,517,518],{},"Eval loop"," — independent verification a job finished (",[209,521,523],{"href":522},"eval-loops-for-enterprise-agent-harnesses","eval loops",")",[258,526,527,530,531,524],{},[194,528,529],{},"Agentic workflow"," — person-designed sequence with stops (",[209,532,534],{"href":533},"what-is-an-agentic-workflow","agentic workflow",[258,536,537,540,541,524],{},[194,538,539],{},"RPA"," — UI replay, still valid when the screen is the only door (",[209,542,544],{"href":543},"loop-vs-rpa","loop vs RPA",[190,546,547,548,552],{},"Operator tests from ",[209,549,551],{"href":550},"how-to-evaluate-loop-engineering","how to evaluate loop engineering",":",[255,554,555,558,561,564,567],{},[258,556,557],{},"Ten empty runs → ten skipped run pages",[258,559,560],{},"Reuse a recipe without copying Slack",[258,562,563],{},"Notify a roster, not a dead channel",[258,565,566],{},"Show a write path that does not require a model",[258,568,569],{},"Refuse a write and prove the system of record unchanged",[190,571,572,573,577],{},"Automate without Governance sends unattended writes. Automate without Communication lacks the triggers operators already use. Automate without Collaboration notifies nobody who can act. ",[209,574,576],{"href":575},"a-loop-is-not-an-agent","A loop is not an agent",": if the happy path still calls a model to “figure it out,” you have scheduled an agent, not compiled a standing order.",[190,579,580],{},"Department loops, again as patterns:",[255,582,583,589,595],{},[258,584,585],{},[209,586,588],{"href":587},"loops-for-finance-and-planning","Loops for finance and planning",[258,590,591],{},[209,592,594],{"href":593},"loops-for-revenue-operations","Loops for revenue operations",[258,596,597],{},[209,598,600],{"href":599},"loops-for-legal-and-compliance","Loops for legal and compliance",[190,602,603,608],{},[209,604,607],{"href":605,"rel":606},"https://www.gartner.com/en/documents/5505695",[213],"Gartner’s Hype Cycle for Artificial Intelligence"," has spent several cycles on the gap between experimentation and operational habit. Automate is the habit pillar. It is also the pillar teams skip because a copilot demo is more fun. Skip it and you will still be re-describing Monday in October.",[242,610,612],{"id":611},"pillar-4-governance","Pillar 4 — Governance",[190,614,615,617,618,621],{},[194,616,39],{}," is the control plane — who may read, who may draft, who must sign, what happens on refuse — ",[194,619,620],{},"enforced",", not PDF’d.",[190,623,624,625,367,629,633],{},"See ",[209,626,628],{"href":627},"what-is-ai-governance","what is AI governance",[209,630,632],{"href":631},"what-is-write-back-governance","what is write-back governance",". Governance turns Collaboration and Automate from demos into systems auditors can reconstruct. It is not “Legal’s pillar” alone. Finance needs it for journals. RevOps needs it for CRM writes. Support needs it before a customer-facing send.",[190,635,636],{},"Why Governance is a pillar:",[255,638,639,645,651,657],{},[258,640,641,644],{},[194,642,643],{},"Fail-closed writes"," — an unsigned payload does not execute",[258,646,647,650],{},[194,648,649],{},"Quoted payloads"," — structured intent, not a paragraph the model later misreads",[258,652,653,656],{},[194,654,655],{},"Identity"," — which human or agent acted, under which policy version",[258,658,659,662],{},[194,660,661],{},"Lifecycle record"," — exportable history for “what happened Tuesday”",[190,664,665,666,669],{},"NIST’s Govern function applies to all stages; Map, Measure, and Manage apply to specific systems. A platform that cannot show a refused write cannot Measure. A platform that cannot name the signer cannot Govern. ",[209,667,239],{"href":237,"rel":668},[213]," will ask for the management system around those facts. A policy wiki is not that system.",[190,671,672,673,552],{},"Operator tests overlap ",[209,674,371],{"href":370},[255,676,677,680,683,686],{},[258,678,679],{},"Show a refused write; system of record unchanged",[258,681,682],{},"Replay signer, policy version, and payload without Slack search",[258,684,685],{},"Detach a connector mid-job; the write fails closed",[258,687,688],{},"Show that a guest can see the artefact they were invited to and not the connector they were not",[190,690,691,692,696],{},"Governance without Automate still leaves Monday manual. Governance without Collaboration has no roster to sign. Governance without Communication is asked to approve a file that arrived in a personal drive. ",[209,693,695],{"href":694},"governance-as-a-multiplayer-primitive","Governance as a multiplayer primitive"," is the deeper cut: controls that only one person can operate are not organisational controls.",[242,698,700],{"id":699},"how-the-four-pillars-connect","How the four pillars connect",[190,702,703],{},"Communication feeds context. Collaboration hosts the job. Automate repeats the recipe. Governance refuses what should not land.",[705,706,710],"pre",{"className":707,"code":708,"language":709,"meta":171,"style":171},"language-mermaid shiki shiki-themes github-light github-dark","flowchart TB\n  communication[\"Communication: files and context\"] --> workstream[\"One shared job\"]\n  collaboration[\"Collaboration: people on the job\"] --> workstream\n  workstream --> automate[\"Automate: standing orders\"]\n  workstream --> governance[\"Governance: who can stop a write\"]\n","mermaid",[711,712,713,721,726,732,738],"code",{"__ignoreMap":171},[714,715,718],"span",{"class":716,"line":717},"line",1,[714,719,720],{},"flowchart TB\n",[714,722,723],{"class":716,"line":172},[714,724,725],{},"  communication[\"Communication: files and context\"] --> workstream[\"One shared job\"]\n",[714,727,729],{"class":716,"line":728},3,[714,730,731],{},"  collaboration[\"Collaboration: people on the job\"] --> workstream\n",[714,733,735],{"class":716,"line":734},4,[714,736,737],{},"  workstream --> automate[\"Automate: standing orders\"]\n",[714,739,741],{"class":716,"line":740},5,[714,742,743],{},"  workstream --> governance[\"Governance: who can stop a write\"]\n",[190,745,746,747,372],{},"One workstream sits at the center because that is what operators open — not “the OS kernel.” The OS article explains why isolation matters. This diagram shows ",[194,748,749],{},"what you buy and configure",[190,751,752],{},"A typical week that uses all four:",[754,755,756,762,771,777],"ol",{},[258,757,758,759,761],{},"Vendor redlines arrive in ",[194,760,196],{}," and start a standing-order loop",[258,763,764,765,767,768,770],{},"The loop drafts an obligation summary onto a ",[194,766,340],{},"; the ",[194,769,200],{}," roster is notified",[258,772,773,774,776],{},"Counsel rejects one clause; ",[194,775,39],{}," records the refuse; the customer email never sends",[258,778,779,780,782,783,786],{},"A controller signs an accrual payload; ",[194,781,39],{}," executes; the ",[194,784,785],{},"run page"," shows the read-back",[190,788,789],{},"A copilot-only stack handles a fragment of step two and loses the rest. An RPA-only stack may fetch the file and still have nowhere to put the refuse. A governance-only programme produces a PDF that nobody runs. The pattern is the combination.",[190,791,792,797],{},[209,793,796],{"href":794,"rel":795},"https://aiindex.stanford.edu/",[213],"Stanford HAI’s AI Index"," will not score your pillars. It will keep showing capability outrunning operational maturity. Maturity, on this map, is whether that week is a designed object or a heroic week in chat.",[242,799,801],{"id":800},"what-this-is-not","What this is not",[190,803,804,807],{},[194,805,806],{},"Not a model catalog."," Pillar scores do not start with parameter counts. If the first row of your RFP is context-window size, you are shopping for a chip.",[190,809,810,813,814,817],{},[194,811,812],{},"Not MLOps."," Training and deployment governance stack ",[194,815,816],{},"below"," operational work. They do not replace workstreams, run pages, or signers. You still need them. They are not these four pillars.",[190,819,820,823,824,827],{},[194,821,822],{},"Not a second CRM."," Systems of record stay authoritative. The platform is the system of ",[194,825,826],{},"work",". If a vendor offers to become the ledger, fail the row.",[190,829,830,833,834,838,839,843,844,847],{},[194,831,832],{},"Not harness engineering alone."," ",[209,835,837],{"href":836},"what-is-harness-engineering","Harness engineering"," tightens interactive agents. ",[209,840,842],{"href":841},"loop-engineering-vs-harness-engineering","Loop engineering"," compiles repeat orders. Both live ",[194,845,846],{},"inside"," pillars — Automate and Governance — not as replacements for Communication or Collaboration.",[190,849,850,833,853,858],{},[194,851,852],{},"Not “intelligent automation” as a single buy.",[209,854,857],{"href":855,"rel":856},"https://www.deloitte.com/us/en/insights/topics/talent/intelligent-automation-2022-survey-results.html",[213],"Deloitte’s intelligent automation research"," is useful precisely because it shows toolkits widening. RPA, OCR, process mining, and models are ingredients. The pillars are how ingredients become a platform operators can live in.",[242,860,862],{"id":861},"rfp-scoring-one-row-per-pillar","RFP scoring — one row per pillar",[864,865,866,879],"table",{},[867,868,869],"thead",{},[870,871,872,876],"tr",{},[873,874,875],"th",{},"Pillar",[873,877,878],{},"Ask the vendor",[880,881,882,890,897,904],"tbody",{},[870,883,884,887],{},[885,886,196],"td",{},[885,888,889],{},"Show mail or meeting context bound to a job; file trigger",[870,891,892,894],{},[885,893,200],{},[885,895,896],{},"Show roster roles, guest access, agent with a scoped grant",[870,898,899,901],{},[885,900,203],{},[885,902,903],{},"Show skipped runs, recipe reuse, a run page",[870,905,906,908],{},[885,907,39],{},[885,909,910],{},"Show a refused write, signer replay, policy version",[190,912,913],{},"Fail any row and you will rebuild that function in email within two quarters. That is not rhetoric. It is how departments already work when a pillar is missing: they invent a side channel.",[190,915,916,917,367,920,923],{},"If you can only run two demos, run ",[194,918,919],{},"file bound to a job",[194,921,922],{},"refused write",". Those two catch Communication-plus-Automate and Governance. Then ask who was notified. That catches Collaboration.",[242,925,927],{"id":926},"sequencing-for-operators","Sequencing for operators",[754,929,930,936,941,946],{},[258,931,932,935],{},[194,933,934],{},"Communication + Governance"," — scoped context, read-only connectors, fail-closed default. You can now see work and you cannot silently change a live system.",[258,937,938,940],{},[194,939,200],{}," — one real workstream, two departments, one signer. You can now finish a job without a personal workaround.",[258,942,943,945],{},[194,944,203],{}," — compile the job that ran the same way for three months. You can now skip quietly on a week with nothing to do.",[258,947,948,951,952,955],{},[194,949,950],{},"Expand loops and agents"," — ",[209,953,954],{"href":575},"a loop is not an agent","; use each where stability fits. Do not compile the unknown path. Do not improvise the known one.",[190,957,958,962],{},[209,959,961],{"href":211,"rel":960},[213],"McKinsey"," associates redesign — not tool count — with organisations that report more impact. This sequence is a redesign order. Model-first is the opposite order: capability first, operating object later, email in the gaps.",[190,964,965,966,197,968,197,970,204,972,974],{},"Related reading: ",[209,967,551],{"href":550},[209,969,371],{"href":370},[209,971,366],{"href":365},[209,973,628],{"href":627},". The OS page is linked once above; use it when the conversation drifts to kernels.",[242,976,978],{"id":977},"how-this-shows-up-in-nimbus","How this shows up in Nimbus",[190,980,981,982,984,985,988,989,992],{},"Nimbus maps the four pillars onto product surfaces: ",[209,983,15],{"href":16}," and syncs for Communication, ",[209,986,987],{"href":32},"workstreams"," for Collaboration, Loops for Automate, and ",[209,990,991],{"href":40},"governance"," for the control plane. That mapping is one vendor’s arrangement of the pattern, not the pattern itself.",[190,994,995],{},"If you are writing an RFP, keep the table above and run it on Nimbus the same way you would run it on anyone else. Ask for a file bound to a workstream, a roster with a guest, ten skipped Loop runs, and a refused write. The useful outcome is whether those four demonstrations share one job object. A platform that can only show them as four tours has the nouns and not the map.",[997,998,999],"style",{},"html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":171,"searchDepth":172,"depth":172,"links":1001},[1002,1003,1004,1005,1006,1007,1008,1009,1010],{"id":244,"depth":172,"text":245},{"id":314,"depth":172,"text":315},{"id":446,"depth":172,"text":447},{"id":611,"depth":172,"text":612},{"id":699,"depth":172,"text":700},{"id":800,"depth":172,"text":801},{"id":861,"depth":172,"text":862},{"id":926,"depth":172,"text":927},{"id":977,"depth":172,"text":978},"2026-09-12","An enterprise AI platform stands on four pillars — Communication, Collaboration, Automate, and Governance — so departments finish work together without personal-account workarounds.",{"eyebrow":1014,"title":1015},"Common questions","Product map vs kernel metaphor",[1017,1020,1023,1026],{"question":1018,"answer":1019},"Is this the same as an enterprise AI operating system?","Related, not identical, and scoring them as one object hides what operators actually touch. The operating system is the kernel metaphor — isolation, permissions, durable state — described in [what is an enterprise AI operating system](what-is-an-enterprise-ai-operating-system). These four pillars are the product map: how Communication, Collaboration, Automate, and Governance show up on Monday morning. Use the OS page when you need language for process isolation and fail-closed writes. Use this page when you are scoring vendors on mail, rosters, standing orders, and signers. Refuse a deck that treats “we have an OS” as a substitute for a run page, a roster, or a refused write.",{"question":1021,"answer":1022},"Which pillar should we implement first?","Usually Communication plus Governance — scoped channels and fail-closed writes — then Collaboration on a shared job object, then Automate once the recipe has run the same way for long enough to compile. Automating chaos scales chaos. Use that sequence when the team still lives in personal inboxes and unsigned writes. Reverse it only if you already have a governed work object and are compiling a known path. Refuse “model first.” [McKinsey’s 2025 State of AI](https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai) keeps showing that usage without workflow redesign does not become scale.",{"question":1024,"answer":1025},"Do we need all four if we only want standing-order loops?","You can pilot one loop on a single trigger. Production repeat work pulls the other three whether you named them or not. Without Communication, the loop lacks the files and threads operators already use. Without Collaboration, it notifies a channel instead of a roster. Without Governance, it writes or it cannot prove it refused. Use a thin pilot to prove skip semantics. Refuse a production rollout that treats Automate as a standalone product. The first unsigned write will invent the missing pillars in email.",{"question":1027,"answer":1028},"How do we score a vendor that is strong on only two pillars?","Score the gap as rebuild-in-email risk, not as a discount. A brilliant copilot with no governance is a personal assistant. A brilliant bot farm with no communication layer will watch the wrong folder. A governance PDF with no collaboration object has no roster to sign. Ask each vendor to demonstrate one row per pillar, then decide which gap you are willing to own. Refuse a “platform” that cannot show a refused write and a file bound to a job in the same week. Those two demos catch most of the missing map.","/blog/four-pillars-of-an-enterprise-ai-platform",{"title":181,"description":1012},"architecture","blog/four-pillars-of-an-enterprise-ai-platform",[1031,1034,1035,991],"enterprise-ai","platform","H4olEqUn6HS9wQuT1NsGJLsIvTfxW7DuGCdNw-ryZWE",{"hero":1038,"id":1040,"title":1041,"archived":165,"authors":166,"badge":166,"body":1042,"date":166,"definedTerm":166,"department":166,"description":1046,"extension":174,"eyebrow":1047,"faqHeader":166,"faqs":166,"footerBand":1048,"headline":166,"image":166,"industry":166,"jobType":166,"listed":131,"location":166,"navigation":131,"openRoles":166,"pageLayout":166,"path":60,"relatedHeading":1054,"seo":1055,"series":166,"sitemap":131,"status":166,"stem":1056,"subhead":166,"tags":166,"video":166,"whyJoin":166,"workplaceType":166,"__hash__":1057},{"filename":1039},"u2221455217_Flat_design_of_a_futuristic_minimalist_landscape__5d589295-cdea-4ea9-a262-be766881accf_1.png","content/blog/index.md","Exploring the future of intelligence.",{"type":168,"value":1043,"toc":1044},[],{"title":171,"searchDepth":172,"depth":172,"links":1045},[],"Deep dives into pre-cognitive intelligence, sentient enterprises, and the evolving landscape of AI-driven business transformation.","Latest Research",{"headline":1049,"description":1050,"primaryLabel":1051,"primaryTo":1052,"secondaryLabel":1053,"secondaryTo":12},"Stay at the frontier.","Subscribe for product updates and new insights.","Subscribe","/newsletter","Explore the platform","More research",{"title":1041,"description":1046},"blog/index","BFSWGYO9bcTlaulivKYWyg08_DJHsdGg3OC6g_CG1Hw",[1059,166],{"id":1060,"title":1061,"archived":165,"authors":1062,"badge":1064,"body":1065,"date":1011,"definedTerm":166,"department":166,"description":1697,"extension":174,"eyebrow":166,"faqHeader":1698,"faqs":1700,"footerBand":166,"headline":166,"image":166,"industry":166,"jobType":166,"listed":165,"location":166,"navigation":131,"openRoles":166,"pageLayout":166,"path":1713,"relatedHeading":166,"seo":1714,"series":1031,"sitemap":131,"status":166,"stem":1715,"subhead":166,"tags":1716,"video":166,"whyJoin":166,"workplaceType":166,"__hash__":1718},"content/blog/governance-as-a-multiplayer-primitive.md","Governance as a Multiplayer Primitive",[1063],{"name":184,"to":136},{"label":186},{"type":168,"value":1066,"toc":1686},[1067,1084,1102,1115,1125,1129,1132,1140,1143,1173,1182,1190,1194,1197,1214,1217,1223,1229,1251,1266,1281,1294,1298,1305,1312,1321,1330,1338,1350,1358,1362,1369,1384,1387,1390,1408,1418,1425,1429,1432,1435,1452,1460,1472,1525,1530,1534,1537,1540,1551,1563,1574,1594,1598,1604,1609,1616,1622,1626,1629,1649,1655,1661,1664,1666,1675,1678,1684],[190,1068,1069,1070,1073,1074,1079,1080,1083],{},"Governance as a multiplayer primitive means the controls live ",[194,1071,1072],{},"in the room where the work happens"," — on the roster, on the payload, on the spend cap for this job — not in a PDF that arrives after someone already changed the record. Gartner’s ",[209,1075,1078],{"href":1076,"rel":1077},"https://www.gartner.com/en/articles/ai-governance-trism",[213],"TRiSM"," framing — trust, risk, and security management — stresses ",[194,1081,1082],{},"runtime"," controls, not slide decks. If your proof of governance is a quarterly attestation while CRM writes still succeed without a named signer, you have principles, not a primitive.",[190,1085,1086,1089,1090,1094,1095,1098,1099,1101],{},[209,1087,1088],{"href":627},"What is AI governance"," is the programme: who may use which AI, on which data, with a record afterwards. ",[209,1091,1093],{"href":1092},"rbac-for-enterprise-ai","RBAC for enterprise AI"," is who may see which jobs and tools. ",[209,1096,1097],{"href":631},"Write-back governance"," is the fail-closed rule on live-system changes. This page is the ",[194,1100,1031],{}," that makes those ideas multiplayer: several people and an agent on one job, with authority that cannot exceed the humans in the room.",[190,1103,1104,1105,1109,1110,1114],{},"The ",[209,1106,1108],{"href":231,"rel":1107},[213],"NIST AI Risk Management Framework"," (2023) says Govern, Map, Measure, Manage. Mapping still fails if the people who click can PATCH Salesforce without showing finance the exact fields. ",[209,1111,239],{"href":1112,"rel":1113},"https://www.iso.org/standard/42001",[213]," wants named actors and operational controls. Neither standard is satisfied by a training video and a hopeful prompt.",[190,1116,1117,1120,1121,1124],{},[209,1118,1119],{"href":397},"Multiplayer AI vs multi-agent AI"," names the room. Governance is what keeps the room from being a demo with extra seats. ",[209,1122,1123],{"href":330},"What is collaborative AI"," is the shared-job definition. This page is why the stop is visible to everyone on that job — including the partner who joins mid-week.",[242,1126,1128],{"id":1127},"why-governance-belongs-in-the-room","Why governance belongs in the room",[190,1130,1131],{},"Enterprise software already knew maker-checker: one person proposes, another authorises. Generative AI added a proposer that never sleeps and never feels embarrassment. The instinct to “ask legal later” produces the same failure mode as “ask legal in email after the post.”",[190,1133,1134,1135,1139],{},"McKinsey’s ",[209,1136,1138],{"href":211,"rel":1137},[213],"State of AI"," (2025) found that 88% of organisations use AI in at least one function while most remain in pilot. Pilots hide the multiplayer problem. One enthusiast and one assistant do not need a roster. The first time finance, ops, and a partner share an exception, the missing primitive shows up as a write nobody can refuse in time.",[190,1141,1142],{},"Multiplayer governance means four things, together:",[255,1144,1145,1151,1157,1163],{},[258,1146,1147,1150],{},[194,1148,1149],{},"Roster."," Who is on this job, with what role — including which AI role may propose but not sign.",[258,1152,1153,1156],{},[194,1154,1155],{},"Inherited authority."," The agent cannot exceed the person whose credentials it uses. A junior analyst’s session does not inherit the CFO’s write token because the connector was set up as a superuser.",[258,1158,1159,1162],{},[194,1160,1161],{},"Spend as scheduling input."," Token or step budgets are not only finance dashboards; they are “this job pauses until a named delegate raises the cap.”",[258,1164,1165,1168,1169,1172],{},[194,1166,1167],{},"Notify the roster, not the org."," Alerts go to people who can act on ",[194,1170,1171],{},"this"," payload, not a company-wide channel where the signal drowns.",[190,1174,1175,1176,1178,1179,372],{},"That is different from broadcasting “AI policy updated” to ten thousand inboxes. The order hold needs finance on ",[194,1177,1171],{}," job, not ",[711,1180,1181],{},"#general",[190,1183,1104,1184,1189],{},[209,1185,1188],{"href":1186,"rel":1187},"https://oecd.ai/en/ai-principles",[213],"OECD AI Principles"," put accountability and transparency next to robustness. Accountability is empty if the accountable person is not in the room when the field is about to move. Transparency is empty if the payload lives in a private thread. Multiplayer governance is how those principles become clickable.",[242,1191,1193],{"id":1192},"roster-the-multiplayer-unit-of-accountability","Roster: the multiplayer unit of accountability",[190,1195,1196],{},"A roster is not “everyone with a login.” It is the list of people — and bounded AI roles — who may see this brief, these files, and this proposal before it executes.",[190,1198,1199,1200,833,1203,1205,1206,1209,1210,1213],{},"Classic RBAC assigns permissions to roles. Enterprise AI must answer a sharper question: ",[194,1201,1202],{},"on this job, right now, whose name is on the execute step?",[209,1204,1093],{"href":1092}," is the full guide; do not re-derive it here. The multiplayer twist is that RBAC entries attach to the ",[194,1207,1208],{},"work object",", not only to the org chart. ",[209,1211,1212],{"href":339},"What an AI workstream is"," is that object.",[190,1215,1216],{},"Three roster mistakes show up in every pilot:",[190,1218,1219,1222],{},[194,1220,1221],{},"1. Shared inbox as signer."," “Finance@” is not a person. Auditors ask for a name, not a distribution list. A mailbox cannot refuse a payload at 22:00. A named delegate can.",[190,1224,1225,1228],{},[194,1226,1227],{},"2. Guest with write by accident."," A partner who should see their slice inherits the production token because setup was easy. Least privilege died at the invite dialog.",[190,1230,1231,1234,1235,1240,1241,1244,1245,1247,1248,1250],{},[194,1232,1233],{},"3. Agent as implicit admin."," The model runs with a service account that can edit every object “because integration.” ",[209,1236,1239],{"href":1237,"rel":1238},"https://genai.owasp.org/llm-top-10/",[213],"OWASP’s LLM Top 10"," lists excessive agency as a first-class risk. Multiplayer governance is the organisational version: ",[194,1242,1243],{},"who"," could have stopped ",[194,1246,1171],{}," change on ",[194,1249,1171],{}," job.",[190,1252,1253,1257,1258,1261,1262,1265],{},[209,1254,1256],{"href":1255},"what-is-human-in-the-loop-ai","What is human-in-the-loop AI"," becomes real when the loop shows ",[194,1259,1260],{},"whose"," loop — on this roster — for ",[194,1263,1264],{},"which"," class of write. A node labelled “review” in a vendor diagram is not governance until it is a person who can refuse while others watch.",[190,1267,1268,1269,1271,1272,1274,1275,1277,1278,1280],{},"Function walkthroughs change the names, not the primitive. ",[209,1270,440],{"href":439}," needs a roster on the ticket. ",[209,1273,434],{"href":433}," needs a roster on the people decision, with policy version attached. ",[209,1276,416],{"href":415}," needs finance on the stage conflict. ",[209,1279,428],{"href":427}," needs the closer on the hold. Same primitive. Different artefact.",[190,1282,1283,1284,1289,1290,372],{},"Microsoft and LinkedIn’s ",[209,1285,1288],{"href":1286,"rel":1287},"https://www.microsoft.com/en-us/worklab/work-trend-index/ai-at-work-is-here-now-comes-the-hard-part",[213],"2024 Work Trend Index"," reported that 78% of AI users at work bring their own tools. BYO tools have no roster. That is the point. Personal convenience and multiplayer accountability do not share a session. If the exception already requires two departments, a personal assistant is the wrong container — see ",[209,1291,1293],{"href":1292},"collaborative-ai-and-personal-assistants","collaborative AI and personal assistants",[242,1295,1297],{"id":1296},"inherited-authority-the-agent-is-not-a-superuser","Inherited authority: the agent is not a superuser",[190,1299,1300,1301,1304],{},"“Inherited authority” means the agent’s grants are the ",[194,1302,1303],{},"intersection"," of what the job allows and what the acting person may do — never the union of every connector in the tenant.",[190,1306,1307,1308,1311],{},"If the WMS integration can release any hold but the operator is a warehouse supervisor without credit authority, the agent must not release a credit hold because the prompt was confident. Least privilege for AI is not a smaller model. It is a smaller ",[194,1309,1310],{},"effective"," identity for this session.",[190,1313,1314,1315,1320],{},"IBM’s ",[209,1316,1319],{"href":1317,"rel":1318},"https://newsroom.ibm.com/2024-07-30-ibm-report-escalating-data-breach-disruption-pushes-costs-to-new-highs",[213],"Cost of a Data Breach"," report (2024) is often cited for breach dollars. The operational cousin is a customer record changed without a name — no breach required. Inherited authority is how you keep the fluent paragraph from becoming a fact the company inherits.",[190,1322,1323,1325,1326,1329],{},[209,1324,1097],{"href":631}," is the execute gate: show the payload, require the signer, fail-closed if missing. Inherited authority is the ",[194,1327,1328],{},"read and propose"," gate: which sources this session may touch at all. A model that can see every forecast “for context” has already lost the multiplayer plot, even if it never writes.",[190,1331,1332,1333,1337],{},"When agents are ",[209,1334,1336],{"href":1335},"agents-should-be-disposable","disposable",", inherited authority survives swaps. The next model does not arrive with a fresh superuser token. It arrives with the same bounded grants on the same job. Continuity without bounds is how yesterday’s exception becomes tomorrow’s god session.",[190,1339,1340,1344,1345,1349],{},[209,1341,1343],{"href":1342},"search-is-not-memory","Search is not memory"," is the retrieval mistake; ",[209,1346,1348],{"href":1347},"what-is-institutional-memory-in-enterprise-ai","institutional memory in enterprise AI"," is the company-scale layering. Multiplayer governance is the live-job layer: asserted policy and decision rights sit on the roster while the work is open. Do not collapse those layers into one index and call it control.",[190,1351,1104,1352,1357],{},[209,1353,1356],{"href":1354,"rel":1355},"https://artificialintelligenceact.eu/",[213],"EU AI Act"," documentation instinct — who did what, under which procedure — is easier to meet when authority is inherited per job than when a tenant-wide service account did everything. You do not need to be in scope of the Act to want a name on the execute step.",[242,1359,1361],{"id":1360},"spend-as-scheduling-input","Spend as scheduling input",[190,1363,1364,1365,1368],{},"Spend caps are usually drawn on finance slides: monthly tokens, seat tiers, flagship defaults. In a multiplayer job, spend is also ",[194,1366,1367],{},"scheduling",": the run stops, the roster is notified, a delegate decides whether this exception is worth another hour of frontier model on extraction.",[190,1370,1371,1372,1376,1377,1380,1381,1383],{},"That is not stinginess. It is visibility. ",[209,1373,1375],{"href":1374},"what-is-ai-token-economics","What is AI token economics"," covers the categories. Multiplayer governance covers ",[194,1378,1379],{},"who on the roster"," may raise the cap for ",[194,1382,1171],{}," hold, with a record.",[190,1385,1386],{},"Uncapped “always flagship” on shared jobs is how two departments burn budget on the same conflict without seeing each other’s runs. McKinsey’s 2025 survey keeps showing use without redesign. Spend-as-scheduling is a small redesign: the job names a default route, a cap stops the loop, and a human decides.",[190,1388,1389],{},"Treat spend like overtime approval:",[255,1391,1392,1395,1405],{},[258,1393,1394],{},"The job names a default route — compact for classify, frontier for judgement.",[258,1396,1397,1398,1401,1402,372],{},"A cap stops the loop and pings the ",[194,1399,1400],{},"roster",", not ",[711,1403,1404],{},"#ai-governance",[258,1406,1407],{},"A delegate’s approval is stored next to the job, not only in the billing console.",[190,1409,1410,1413,1414,1417],{},[209,1411,1412],{"href":370},"How to evaluate an agent harness"," asks vendors for per-step model breakdown on a live run. Multiplayer governance asks whether that breakdown is visible to the finance delegate ",[194,1415,1416],{},"on the job"," when a hold must close tonight. A platform invoice that finance sees next quarter is not a control. A pause the closer can lift tonight is.",[190,1419,1420,1424],{},[209,1421,1423],{"href":1422},"what-to-look-for-in-model-routing","What to look for in model routing"," is the routing sheet. Routing without a roster is still a private optimisation. Routing with a roster is a scheduling decision other people can see.",[242,1426,1428],{"id":1427},"notify-the-roster-not-the-org","Notify the roster, not the org",[190,1430,1431],{},"Alert fatigue kills governance. Company-wide “AI used sensitive data” emails train people to ignore the channel that matters.",[190,1433,1434],{},"Multiplayer primitives route signal to people who can act:",[255,1436,1437,1440,1446],{},[258,1438,1439],{},"Finance when a release payload is waiting for sign.",[258,1441,1442,1443,1445],{},"Legal when a clause draft touches export control on ",[194,1444,1171],{}," contract job.",[258,1447,1448,1449,1451],{},"Ops when a WMS exception ages past SLA on ",[194,1450,1171],{}," SKU lane.",[190,1453,1104,1454,1459],{},[209,1455,1458],{"href":1456,"rel":1457},"https://www.whitehouse.gov/wp-content/uploads/2024/03/M-24-10-Advancing-Governance-Innovation-and-Risk-Management-for-Agency-Use-of-Artificial-Intelligence.pdf",[213],"US OMB M-24-10"," memorandum on federal AI use puts inventory and named owners first. Multiplayer notify is the operational version: the owner is on the roster for the job that changed, not an abstract “AI council.”",[190,1461,1462,1467,1468,1471],{},[209,1463,1466],{"href":1464,"rel":1465},"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/",[213],"UK ICO guidance on AI"," still wants purpose and retention ",[194,1469,1470],{},"before"," you turn a tool loose. Purpose is easier to defend when notify is scoped to the people who needed the processing. A blast to the company is not a purpose. It is a habit.",[705,1473,1475],{"className":707,"code":1474,"language":709,"meta":171,"style":171},"flowchart TB\n  job[\"Shared job\"] --> roster[\"People on the roster\"]\n  agent[\"Someone proposes a change\"] --> payload[\"The exact change, quoted\"]\n  payload --> roster\n  roster --> sign{\"Named signer\"}\n  sign -->|approve| write[\"The write goes through\"]\n  sign -->|reject| stored[\"The no stays on the job\"]\n  stored --> job\n  spend[\"Spend cap hit\"] --> roster\n",[711,1476,1477,1481,1486,1491,1496,1501,1507,1513,1519],{"__ignoreMap":171},[714,1478,1479],{"class":716,"line":717},[714,1480,720],{},[714,1482,1483],{"class":716,"line":172},[714,1484,1485],{},"  job[\"Shared job\"] --> roster[\"People on the roster\"]\n",[714,1487,1488],{"class":716,"line":728},[714,1489,1490],{},"  agent[\"Someone proposes a change\"] --> payload[\"The exact change, quoted\"]\n",[714,1492,1493],{"class":716,"line":734},[714,1494,1495],{},"  payload --> roster\n",[714,1497,1498],{"class":716,"line":740},[714,1499,1500],{},"  roster --> sign{\"Named signer\"}\n",[714,1502,1504],{"class":716,"line":1503},6,[714,1505,1506],{},"  sign -->|approve| write[\"The write goes through\"]\n",[714,1508,1510],{"class":716,"line":1509},7,[714,1511,1512],{},"  sign -->|reject| stored[\"The no stays on the job\"]\n",[714,1514,1516],{"class":716,"line":1515},8,[714,1517,1518],{},"  stored --> job\n",[714,1520,1522],{"class":716,"line":1521},9,[714,1523,1524],{},"  spend[\"Spend cap hit\"] --> roster\n",[190,1526,1527,1529],{},[209,1528,1212],{"href":339}," is the object that holds roster, payload, and stored rejection together. Demand that shape in any shared product. Do not accept “we have audit logs somewhere” as a substitute for a visible stop on the job.",[242,1531,1533],{"id":1532},"why-a-pdf-after-the-write-is-not-governance","Why a PDF after the write is not governance",[190,1535,1536],{},"PDFs and training videos have a role: policy, inventory, DPIA thinking. None of that stops an unsigned PATCH at 22:00.",[190,1538,1539],{},"Multiplayer governance is enforceable at the moment of change:",[255,1541,1542,1545,1548],{},[258,1543,1544],{},"The payload is visible to the roster before execution.",[258,1546,1547],{},"A rejection is stored on the job — not “we discussed in Teams.”",[258,1549,1550],{},"Fail-closed is default; approval is explicit.",[190,1552,1553,1554,1559,1560,1562],{},"Air Canada’s chatbot case — ",[209,1555,1558],{"href":1556,"rel":1557},"https://www.cbc.ca/news/canada/british-columbia/air-canada-chatbot-lawsuit-1.7116416",[213],"CBC’s report"," on bereavement fares — is customer-facing write-back without a gate. Multiplayer governance would have required a named signer on the message, visible to whoever owns customer commitments, ",[194,1561,1470],{}," the customer relied on it. The lawsuit is about a commitment. The missing primitive was a stop in the room that produced the commitment.",[190,1564,1565,1569,1570,1573],{},[209,1566,1568],{"href":1567},"four-pillars-of-an-enterprise-ai-platform","Four pillars of an enterprise AI platform"," is the wider stack — wiki, workstreams, routing, governance as layers. This page is the ",[194,1571,1572],{},"multiplayer"," layer: controls co-located with the job, not bolted on after adoption. A wiki without a roster is asserted policy nobody on the exception can see. A workstream without a stop is a shared folder with a model.",[190,1575,1576,1581,1582,1585,1586,1589,1590,1593],{},[209,1577,1580],{"href":1578,"rel":1579},"https://www.nist.gov/itl/ai-risk-management-framework/nist-ai-rmf-playbook",[213],"NIST’s AI RMF Playbook"," gives measurement language. Translate it: ",[194,1583,1584],{},"Map"," the job and the write class, ",[194,1587,1588],{},"Measure"," signer completeness and time-to-rejection, ",[194,1591,1592],{},"Manage"," by refusing write tokens until a stored “no” exists on this exception type. Measurement that lives only in a GRC tool the operators never open will not change the 22:00 write.",[242,1595,1597],{"id":1596},"how-multiplayer-governance-connects-to-evaluation","How multiplayer governance connects to evaluation",[190,1599,1600,1603],{},[209,1601,1602],{"href":365},"How to evaluate collaborative AI"," asks whether a second department can join, whether rejections store, and what happens after the session. Those are governance questions dressed as collaboration questions. If you only score fluency, you will buy a shared login.",[190,1605,1606,1608],{},[209,1607,1412],{"href":370}," asks for a refused write and a replay export. Multiplayer governance asks whether finance on the roster saw the same payload the harness refused. A harness that refuses in a log finance cannot open is a control for engineers, not for the job.",[190,1610,1611,1612,1615],{},"When you run a proof of value, script a ",[194,1613,1614],{},"stored rejection"," before any write token. If the vendor cannot show the “no” on the job Monday, you do not have multiplayer governance — you have a chat with audit logs somewhere else.",[190,1617,1618,1621],{},[209,1619,1620],{"href":1335},"Agents should be disposable"," is the continuity claim: roster, payload, and rejection survive agent swaps. Governance as a multiplayer primitive is why those artefacts are in the room — enforced, visible, fail-closed — not in a PDF that arrives after the field moved.",[242,1623,1625],{"id":1624},"how-to-start-without-a-committee-project","How to start without a committee project",[190,1627,1628],{},"You do not need a new steering group to put a stop in one room.",[754,1630,1631,1634,1637,1643,1646],{},[258,1632,1633],{},"Pick one recurring cross-team job already fought in chat.",[258,1635,1636],{},"Put it on a named work object with a roster — finance, ops, owner — not a shared login.",[258,1638,1639,1640,1642],{},"Require a ",[194,1641,1614],{}," before enabling write. Week one’s “no” is the control.",[258,1644,1645],{},"Route spend-cap alerts to the roster, not the company feed.",[258,1647,1648],{},"After two cycles, ask an independent reader to reconstruct signer and payload without Slack.",[190,1650,1651,1654],{},[209,1652,1653],{"href":1292},"Collaborative AI and personal assistants"," is when the work should stay personal. Multiplayer governance begins when two teams must stand on the same change. If only one person drafts and nothing writes, do not invent a roster for theatre.",[190,1656,1657,1658,1660],{},"Start read-only. Lists and payloads first. Customer-facing mail and bulk writes last. ",[209,1659,837],{"href":836}," is why the prompt alone is not the system; the environment around the model — tools, stops, checks — is. Multiplayer governance is the human half of that environment: who is in the room, what they can refuse, and who gets paged when the cap hits.",[190,1662,1663],{},"If you cannot name the signer for this class of write, you are not ready for execute. If you can name them but they are not on the job, you have an org chart, not a primitive.",[242,1665,978],{"id":977},[190,1667,1668,1669,1671,1672,1674],{},"In Nimbus, ",[209,1670,991],{"href":40}," is attached to the ",[209,1673,340],{"href":32},": roster, inherited connector grants, spend cap as a pause that notifies the people on that job, and fail-closed writes with a stored rejection.",[190,1676,1677],{},"The agent on the workstream proposes. It does not inherit a tenant-wide superuser token. A partner guest sees a scoped slice. A finance delegate sees the same payload ops sees. Alerts go to the roster, not the company feed.",[190,1679,1680,1681,1683],{},"Score that shape with ",[209,1682,366],{"href":365}," on any vendor, including this one. If the proof of value cannot show a named “no” on the job before a write token exists, you are still looking at a chat with a policy PDF.",[997,1685,999],{},{"title":171,"searchDepth":172,"depth":172,"links":1687},[1688,1689,1690,1691,1692,1693,1694,1695,1696],{"id":1127,"depth":172,"text":1128},{"id":1192,"depth":172,"text":1193},{"id":1296,"depth":172,"text":1297},{"id":1360,"depth":172,"text":1361},{"id":1427,"depth":172,"text":1428},{"id":1532,"depth":172,"text":1533},{"id":1596,"depth":172,"text":1597},{"id":1624,"depth":172,"text":1625},{"id":977,"depth":172,"text":978},"Governance belongs in the room — roster, inherited authority, spend as scheduling, notify the job not the org. Not a PDF after the write. A guide to multiplayer controls.",{"eyebrow":1014,"title":1699},"Controls in the room",[1701,1704,1707,1710],{"question":1702,"answer":1703},"Is this the same as RBAC?","RBAC answers who may do what. This page answers why those rules must live on the shared job — roster, inherited authority, spend caps — so a second department sees the same stop. Org-wide roles are necessary and not sufficient. A finance director who can theoretically approve writes still needs to be on this job, looking at this payload, when the hold is about to clear. If the only access model is the login page, two people can share a room and still not share a control. Put the grant on the work object.",{"question":1705,"answer":1706},"Do we still need a governance committee?","Yes for policy, inventory, and the questions a committee is good at: which uses are allowed, which data classes are in scope, who owns the programme. No committee replaces a named signer on the job that is about to change CRM. Quarterly attestation while unsigned writes succeed is principles, not a primitive. Keep the committee. Put the stop in the room. Measure both: policy coverage and stored rejections on live jobs.",{"question":1708,"answer":1709},"What is the first multiplayer gate to add?","A roster with a stored rejection before any write token. If nobody can say no on the job, you have a room without a door. Do not start with a company-wide AI policy email. Do not start with a spend dashboard nobody on the exception can see. Name the people on one recurring job, attach the files, and require a visible “no” before anyone enables execute. Week one’s rejection is the control. Week four’s write, if you get there, inherits it.",{"question":1711,"answer":1712},"Is notify-the-roster just another Slack channel?","No. A company-wide “AI used sensitive data” channel trains people to ignore the signal. Multiplayer notify goes to people who can act on this payload — finance on this release, legal on this clause, ops on this SKU lane. The owner is on the job that changed, not an abstract council. If the alert cannot name the job, the payload, and the next action, it is noise. Route spend-cap pauses the same way: the roster decides whether this exception is worth another hour, and the decision stays on the job.","/blog/governance-as-a-multiplayer-primitive",{"title":1061,"description":1697},"blog/governance-as-a-multiplayer-primitive",[1031,991,1572,1717],"RBAC","KJKqlk2jj1ICBw4Jp4lWmnvHVFXM8PcPEvWRNaGbxAk",{"enabled":165,"message":1720,"linkLabel":79,"linkHref":80,"id":1721,"title":1722,"archived":165,"authors":166,"badge":166,"body":1723,"date":166,"definedTerm":166,"department":166,"description":171,"extension":174,"eyebrow":166,"faqHeader":166,"faqs":166,"footerBand":166,"headline":166,"image":166,"industry":166,"jobType":166,"listed":131,"location":166,"navigation":131,"openRoles":166,"pageLayout":166,"path":1727,"relatedHeading":166,"seo":1728,"series":166,"sitemap":165,"status":166,"stem":1729,"subhead":166,"tags":166,"video":166,"whyJoin":166,"workplaceType":166,"__hash__":1730},"We're hiring! Join the team building the Sentient Enterprise.","content/shared/hiring.md","Hiring banner",{"type":168,"value":1724,"toc":1725},[],{"title":171,"searchDepth":172,"depth":172,"links":1726},[],"/shared/hiring",{"title":1722,"description":171},"shared/hiring","1zs3boivKda1e-b-hAyuNcmZSKjZUAXmecnwHVgcHzk",{"fold":1732,"id":1736,"title":1737,"archived":165,"authors":166,"badge":166,"body":1738,"date":166,"definedTerm":166,"department":166,"description":171,"extension":174,"eyebrow":166,"faqHeader":166,"faqs":166,"footerBand":1742,"headline":166,"image":166,"industry":166,"jobType":166,"listed":131,"location":166,"navigation":131,"openRoles":166,"pageLayout":166,"path":1746,"relatedHeading":166,"seo":1747,"series":166,"sitemap":165,"status":166,"stem":1748,"subhead":166,"tags":166,"video":166,"whyJoin":166,"workplaceType":166,"__hash__":1749},{"headline":1733,"description":1734,"primaryLabel":8,"primaryTo":1735,"secondaryLabel":1053,"secondaryTo":12},"Run frontier AI your business actually owns.","Governed agent swarms, 2,000+ integrations, and a knowledge graph that stays inside your walls. Start on Free.","/signup?plan=free","content/shared/cta.md","Site CTAs",{"type":168,"value":1739,"toc":1740},[],{"title":171,"searchDepth":172,"depth":172,"links":1741},[],{"headline":1743,"description":1744,"primaryLabel":8,"primaryTo":1735,"secondaryLabel":1745,"secondaryTo":85},"See what governed AI looks like on your stack.","Connect your tools, run a workstream, and keep every decision on your ledger. Start on Free.","Talk to our team","/shared/cta",{"title":1737,"description":171},"shared/cta","PS2VPJsszmUpMBZT6nEp8cWXCdeiN6zDRl-p8d0uY2k",1789797893975]