QUICK CHECK
Governance Readiness Matrix
Calculate your Governance Debt Ratio and identify your quadrant.
Frameworks
Free to read and cite with attribution to Sougata Roy and sougataroy.com. Do not republish, rebrand, or claim authorship of any framework, term, or model as your own.
Five foundational concepts and eight operational frameworks for making enterprise AI governance decisions legible, reviewable, and repeatable. Each addresses a specific gap that appears consistently in regulated deployments.
CORE CONCEPTS
5 conceptsThe accumulated accountability design work deferred while deploying AI at speed. It builds the moment a deployment goes live without authorization, a named owner, or a compliance review. It becomes visible when an examiner asks a question nobody can answer.
The unplanned divergence between what an organization genuinely intended an AI system to do and what it actually does in production. Not deliberate misrepresentation, the gap governance failed to detect before deployment.
The implicit belief that accountability for an AI agent's decisions resides with the vendor, the platform, or another team. It doesn't. And regulators have started saying so explicitly, regardless of what contracts say.
Three tiers of uncontrolled AI proliferation: employee shadow AI, organizational procurement without central visibility, and authorized agents with over-permissive operational scope. Each tier requires a different governance response.
The organizational design layer that defines purpose, boundaries, and accountability before any agent goes live. The difference between a governance posture that holds under examination and one assembled under pressure after something goes wrong.
Original Frameworks
8 frameworksThe three organizational layers every enterprise must design before any agent goes live. The layer most skip is the one that costs them.
Agent count versus authorization coverage
Three tiers. One deployment. A map of who owns what across the provider, the platform, and the deploying organization, and the gap that lands on the organization that decided to deploy.
Five steps for reconciling what your Microsoft tenant actually contains against what your organization formally approved. The gap between those two numbers is the Tenant Reconciliation Gap, and it is where governance work begins.
Five governance decisions every enterprise must make before any agent goes live. The platform enforces access. Only the deploying organization can authorize what the agent is permitted to do.
Three phases every organization moves through as its ratio of governed agents to total agents changes. Most cannot calculate the ratio. The inability to produce the number is the finding.
A two-tier diagnostic for regulated enterprises deploying AI agents on Jira, Salesforce, ServiceNow, SAP, and the Microsoft stack.
When the chain acts, which authorization record covers it? Four questions every enterprise must answer before an agent orchestration goes live. The only framework built specifically for multi-agent chains.
QUICK CHECKS
6 reference cardsOne-page reference cards for running governance exercises in a single working session. Download and use in board reviews, team workshops, or audit preparation.
QUICK CHECK
Calculate your Governance Debt Ratio and identify your quadrant.
QUICK CHECK
Twelve governance items across three layers before any agent goes live.
QUICK CHECK
Four steps from deployment count to ratio to remediation priority.
QUICK CHECK
Three tiers. Map who owns what before the agent goes live.
QUICK CHECK
Five steps from M365 inventory to shadow agent count.
QUICK CHECK
Baseline, comparison, and trigger conditions for every agent in production.
WHITE PAPERS
1 paperWhite Paper
The Organizational Accountability Architecture That Existing Governance Frameworks Require But Do Not Implement at the Agent Level
v1.0 · May 2026
The Governance Gap newsletter
New frameworks published as the platform evolves.
Enterprise AI governance on the Microsoft stack. Built from primary sources. Every Tuesday at 7am.