Portfolio
Which AI workers are active, pending, paused, suspended, revoked, or retired, and which business functions own them?
Enterprise AI Oversight
Board oversight for governed AI worker portfolios.
Translate Passport, Evidence, Human Review, Toll Gate, Runtime Permit, and lifecycle records into board-ready questions about inventory, ownership, risk, exceptions, evidence gaps, lifecycle posture, and value signals.
Use this page when you need the executive oversight answer: what leaders can review across inventory, risk, evidence, exceptions, value signals, lifecycle posture, and owner decisions. The view informs accountable human decisions; it does not make them.
Source-backed read-model contract
Board and executive views summarize governed records; they do not become a second control plane.
The first dashboard slice is backed by Passport, Evidence, Human Review, Toll Gate, Runtime Permit, and lifecycle records. The source contract lives at data/board-executive-oversight-read-model.json and reuses the Passport Studio data dictionary and calculation registry.
| Dashboard signal | Source record | Boundary |
|---|---|---|
| Inventory and Passport coverage | Worker and Passport records | Inventory visibility is not production authorization. |
| Open owner decisions | Human Review items linked to Passport and Worker records | Queue visibility does not approve, deny, or accept risk. |
| Evidence gaps and lifecycle posture | Evidence Records, Stamps, Passport lifecycle state, and Worker state | Readiness signals support review preparation only. |
| Runtime and Toll Gate posture | Runtime Permit and Toll Gate Decision records | Local preview metrics do not imply live runtime enforcement. |
| Third-party and connection posture | Vendor Model Passport and Tool/API/Connector Registry records | Connection visibility does not imply live integration, endorsement, certification, production authorization, compliance approval, or security approval. |
Decision boundary: This Board Oversight Dashboard summarizes governed source records. It does not approve AI workers and does not create legal, compliance, audit, security, production, financial, or risk-acceptance conclusions.
Board Decision Agenda
Six questions keep leadership focused on decisions and accountable follow-through.
Authority
Which actions require Human Review, which are blocked, and which Runtime Permits or Toll Gates changed this quarter?
AI Risk Appetite
Which uses are acceptable, conditional, restricted, or outside appetite—and where must activity pause?
Agent Accountability
Who owns the outcome, operation, escalation, renewal, and retirement path for every material AI Worker?
Evidence and incidents
Where are evidence gaps, stale reviews, unresolved exceptions, incidents, or incomplete renewal records concentrated?
Value and lifecycle
Which value signals are owner-validated, which remain modeled, and which workers should scale, change, or retire?
Incident And Monitoring Lens
Board and executive views should show posture, incident trajectory, and exposure-adjusted monitoring.
These are read-only oversight signals built from Passport, Evidence, Human Review, Toll Gate, Runtime Permit, lifecycle, incident, and monitoring records. They help leaders ask better questions without converting dashboard signals into approval, assurance, legal conclusions, compliance conclusions, security authorization, risk acceptance, or production approval.
Incident trajectory
Summarize open incidents, containment status, restart-review posture, overdue evidence, and repeated blocked actions so leadership can see whether risk is worsening, stable, or improving.
Exposure-adjusted monitoring
Weight monitoring attention by risk tier, data class, connector exposure, external visibility, and action consequence instead of treating every AI worker as the same oversight burden.
Unresolved evidence gaps
Track missing owner review, stale data-lineage evidence, prompt or RAG review gaps, missing incident path, overdue renewal, and unresolved Runtime Permit denials.
Boundary: These read-only oversight signals support governance inquiry and management follow-up. They do not approve AI workers, certify compliance, validate security posture, issue audit opinions, accept risk, or authorize production use.
Evidence & Passport Reporting
Quarterly board reporting should come from the same governed record.
Passport, Registry, Toll Gate, Human Review, Stamp, incident, exception, and evidence records should support board reporting without creating a second approval system.
A board-ready export should summarize inventory, risk distribution, high-risk agents, open exceptions, pending approvals, incidents, evidence gaps, regulatory exposure, maturity movement, value posture, and recommended management decisions.
Report pack contents
- AI agent inventory and Passport coverage
- Top risks, high-exposure agents, and sensitive-data workflows
- Open findings, policy exceptions, and material incidents
- Evidence completeness and renewal status
- Regulatory exposure map and maturity movement
- Recommended scale, govern, monitor, redesign, or retire decisions
Governance Economics
Measure the business value of governing AI agents.
AI governance should connect risk reduction and evidence generation to operational value. Board and executive reporting should use estimated, modeled, or risk-adjusted language unless financial inputs have been validated by the organization.
Value realization
Track expected hours saved, cost reduced, revenue protected, customer impact, audit effort reduced, and risk reduced.
Risk exposure
Show exposure by agent, business unit, data classification, regulatory impact, tool or connector, oversight dependency, and critical workflow dependency.
Investment portfolio
Classify agents into scale, govern and grow, monitor, redesign, or retire paths based on value, risk, evidence, control coverage, and confidence.
Human decision boundary: Executive reporting supports oversight and management follow-through. Accountable customer owners and qualified reviewers retain legal, privacy, security, compliance, audit, financial, production, and risk-acceptance decisions.