Toolkit governance
One governance loop for the shared toolkit — not three competing bodies. A small cross-UK/India Toolkit Guild with clear decision rights, so the toolkit evolves fast without fragmenting.
The Guild
- Composition — an AI specialist chairs; squad reps rotate. Small, so it decides quickly.
- Decision rights — over agents, prompts, skills and the radar.
- What squads may do without asking — experiment locally, propose blips, draft prompts.
- What needs approval — anything with data egress, a new tool with production reach, a radar ring-move affecting live products.
The rhythm
One monthly 30-minute AI-governance review: the metrics dashboard, the security exception register, and incident learnings. ISO/IEC 42001-aligned.
One loop, not three
The temptation is a separate body for AI, for security, for architecture. That fragments decisions and slows everything. The Guild is the single governance loop; the Community of Practice is the social engine that spreads what it decides.
Standards referenced: ISO/IEC 42001, NIST AI RMF.