Reflections on Each Part · AI Governance: the course

All courses / AI Governance / Module 6 / Chapter 24

Learning objectives

After the lesson the participant can:

Distinguish the author's judgements in this chapter from the evidence-based conclusions of the other chapters.
Summarise, for at least three parts, what the author considers most important and where the author disagrees with common practice.
Explain the governance consequence the author draws from the shrinking time between a patch and a working exploit.
Formulate a position of the participant's own on one of the author's projections, with the evidence that would change it.

Key concepts

Judgement labelled as judgement: Everything before this chapter supports each claim with a source; here the views are the author's own. Projections cite evidence but are labelled as the author's view, and the recommendations of the concluding chapter do not depend on them being right.
Evaluation suite as the real specification: The author's view from Part III: the evaluation suite is the organisation's real specification of an AI system, the place where good enough is written in a form a machine can check.
Instruction versus boundary: The author disagrees with treating instructions as controls: a prohibition in a prompt reduces unwanted behaviour without eliminating it, and a control that leaves the rate above zero is not a boundary.
Two clocks after a patch: One clock runs from a published patch to a working exploit, the other to exploitation at scale. The author's projection is that it is prudent to plan for the first being measured in minutes for many vulnerability classes within a few years.
Delegated decision to patch: The governance consequence: a change advisory board that meets weekly cannot be in the path for known-exploited vulnerabilities, so patching on release, behind canary rings and automatic rollback, is delegated in advance and reviewed afterwards.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Interactive exercise 1 · Match

The comfortable act and what it replaces

The author disagrees with habits that substitute a comfortable act for an uncomfortable one. Match each comfortable act with what the author says it stands in for.

Interactive exercise 2 · Sort

Cited observation or the author's projection

In this chapter the author separates what sources report from what the author projects. Sort each statement accordingly.

Teaching plan

10 min	Opening: the teacher explains the chapter's status as the author's views and its four recurring questions: most important, uncertain, disagree, expect next.
15 min	Six groups take one part each and report in one minute the author's answer to the four questions for that part.
10 min	Teacher presentation of the aside on the exploitation window: the two clocks, the observed data points, the counter-evidence on prioritisation and the horizon register entry.
20 min	Exercise: each participant writes a position paper of one page on one of the author's projections or disagreements.
5 min	Debrief: three participants read out the evidence that would make them change their position.

Discussion

The author would now give bounded autonomy more prominence than declared intent among the eight principles. After the earlier lessons, how would you order the principles for your own organisation?
The author doubts the book's own procurement advice, since most deployers will not receive the artefacts they ask for from the largest providers. What follows for a small authority or a mid-sized company?
A governance function that accepts generated classifications without reading the reasoning has reinvented compliance by checkbox. Where is the line between useful drafting support and that failure?

Written exercise

Exercise · 20 minutes

A position on one of the author's judgements

Choose one judgement from the chapter, for example that Modes 2 and 3 are the least governed, that a single strategic AI provider is a mistake, that a new AI committee makes forum overlap worse, or that emergency patching of known-exploited vulnerabilities should be delegated outside the change advisory board. Write a one-page position for your own organisation: state the judgement in one sentence, say whether your organisation's experience supports it and cite what you have observed, name the evidence that would change your mind, and record the decision you would take now and how reversible it is. Finish with a horizon register entry for it: horizon, owner, statement, consequence for governance, reversibility and next review date.

Deliverable: A one-page position with observed evidence, the evidence that would change it, a decision and its reversibility, and a horizon register entry.

Your work

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

What governance consequence does the author draw from the shrinking time between a patch and a working exploit?
Show the answer
C. Patching known-exploited vulnerabilities on release is delegated in advance and reviewed afterwards
A weekly board cannot be in the path if the first clock is measured in hours. The decision to patch on release, behind canary rings and automatic rollback, is delegated in advance through the decision tiers, and the assumption is recorded for review.
Which two usage modes does the author believe grow fastest with the least oversight?
Show the answer
D. Mode 2 and Mode 3
The author's observation from practice is that Mode 1 is governed through an acceptable-use policy and Mode 4 through project processes, while Modes 2 and 3 grow fastest with the least oversight, since neither passes through intake.
How does the author describe the status of the views in this chapter?
Show the answer
B. As the author's own judgement, not the book's findings, with projections labelled as such
The chapter states that everything before it supports each claim with a source, while what follows are the author's own views, with room to disagree, to doubt and to guess. The concluding chapter sets these judgements aside.