Not the project sponsor. Not the steering committee.
The accountable owner — documented, auditable, defensible.
UK-focused. Built for regulated environments. Designed to survive audit, litigation, and underwriting scrutiny.
These aren't AI questions. They're accountability questions. If you can't answer them, you have an exposure.
Not "who approved the project" — who approved what the system is allowed to pursue.
Name a single accountable role for the system's actions after go-live — not a committee.
Is this D0, D1, D2, or D3 — and is that classification documented and reviewed?
Tools, permissions, data access, external communications, transactions, changes in production.
Do we have behaviour logging, traceability, and retention that would survive audit and discovery?
Is there a tested kill/rollback path, escalation authority, and a defined threshold for intervention?
Where does liability land — Legal, Risk, Technology, the business — and is that agreed in advance?
If your answers are partial, inconsistent across functions, or depend on "we'll investigate if needed" — that's the gap.
Organisations are deploying agentic systems faster than governance is adapting. The problem isn't model performance. It's accountability over time.
When an autonomous system causes harm while acting within policy, most organisations can't demonstrate:
That's a litigation problem. An audit problem. An insurance problem. Not a technology debate.
The question isn't whether your systems work. It's whether you can prove who was accountable when they did.
4–6 weeks. Board-ready output.
We don't implement tooling. Output is designed to be defensible across Risk, Legal, Audit, and Technology.
D0-D3:2026 — Classification of delegated authority in autonomous decision systems
D0-D3 is a trigger-based classification that answers one question: when does autonomous system delegation become an underwriting, audit, or liability issue?
Underwriting implications: D0/D1 = standard operational risk. D2 = requires documented limits and controls as placement conditions. D3 = treated as autonomous authority — coverage priced as if the insured signed the outcomes.
The Quick Reference is open. The full D0-D3:2026 standard is available on request.
UK and EU regulated environments.
Include your industry, jurisdiction (UK/EU/US), and whether you have D2/D3 systems in scope.