| Do we need one vendor's agent platform, or a cross-vendor governance layer? | This separates productivity adoption from enterprise control-plane need. | If multiple AI tools, models, and systems are in scope, favor a neutral governance layer. |
| Who owns each AI worker, scope, data boundary, and approval path? | AI worker accountability cannot be inferred from a seat license. | Require Passport-style ownership, risk, scope, evidence, and lifecycle records. |
| Can governance intent shape execution before an AI worker acts? | Policies, decision rights, and approval paths only matter if they can influence action-time decisions. | Require Runtime Permits, Toll Gates, Human Review, Action Broker controls, and Stamp evidence before higher-risk actions proceed. |
| What happens before a high-risk AI worker action proceeds? | Prompt or conversation pricing does not answer approval, escalation, or fail-closed behavior. | Require Toll Gate, Human Review, Runtime Permit, and Action Broker controls. |
| Can we reconstruct why an AI action was allowed, blocked, escalated, or deferred? | Evidence quality matters for security, privacy, governance, audit preparation, and operational review. | Require Stamps, evidence records, source references, and exportable review packets. |
| What is the total cost of governed operation? | Cheap per-seat or per-token pricing can hide review, integration, support, and governance effort. | Compare total cost across license, usage, integration, review, evidence, support, and change management. |