Frameworks
Four sequential governance gates. Gate N+1 cannot pass without Gate N.
Authorized
4/ 11
Shape conflicts
0always-on blocked
Gate sequence
1Policy
- ·Model on the approved list
- ·Deployment region allowed
- ·Resource limits within policy
2Ethics
- ·Bias audit complete
- ·PII handling documented
- ·Output safety review passed
3Cost
- ·Monthly budget set
- ·Value ratio ≥ 3× minimum
- ·ROI projection documented
4Scale
- ·All prior gates passed
- ·Scale authorization granted by PO / approver
- ·Demand shape ≠ unmanaged
Workload gate status
| Workload | G1 | G2 | G3 | G4 | Gates | Status | Demand |
|---|---|---|---|---|---|---|---|
Customer Support Agent prod·CX Engineering | ✓ | ✓ | ✓ | ✓ | 4/4 | Authorized | Always-on |
Sales Copilot prod·Revenue | ✓ | ✓ | ✓ | · | 3/4 | Awaiting Gate 4 · Scale | Business hrs |
Code Review Bot prod·Platform Eng | ✓ | ✓ | ✓ | ✓ | 4/4 | Authorized | Throttled |
Document Summarizer stg·Legal | ✓ | ✓ | · | – | 2/4 | Awaiting Gate 3 · Cost | Batch off-peak |
Marketing Content Gen prod·Marketing | ✓ | · | – | – | 1/4 | Awaiting Gate 2 · Ethics | Unmanaged |
Fraud Triage Agent prod·Risk & Trust | ✓ | ✓ | ✓ | ✓ | 4/4 | Authorized | Always-on |
Internal Knowledge Bot dev·IT | ✓ | ✓ | · | – | 2/4 | Awaiting Gate 3 · Cost | Business hrs |
Support Triage Router prod·CX Engineering | ✓ | ✓ | ✓ | ✓ | 4/4 | Authorized | Business hrs |
Contract Redliner prod·Legal | ✓ | ✓ | ✓ | · | 3/4 | Awaiting Gate 4 · Scale | Business hrs |
Pipeline Forecast Analyst prod·Revenue | ✓ | ✓ | · | – | 2/4 | Awaiting Gate 3 · Cost | Batch off-peak |
Infra Runbook Assistant stg·Platform Eng | ✓ | ✓ | ✓ | · | 3/4 | Awaiting Gate 4 · Scale | Business hrs |
Enforcement rules
- G1–G4
Gates are sequential. Gate N+1 cannot be approved until all gates 1–N pass. Revoking a gate cascades — later gates are implicitly unset.
- G4 REQ
A >3× inference-volume increase without Gate 4 (Scale) automatically throttles the workload to its previous level and fires an alert.
- SHAPE
The always_on demand shape is blocked unless all four gates pass. Workloads on always_on without full gate authorization are flagged above.
- HOURLY
Gate status is re-checked on every hourly budget evaluation. A workload that loses gate status mid-cycle is flagged immediately.