All courses / Landscape / Module 3 / Chapter 17
Learning objectives
After the lesson the participant can:
- Read a row of a decision-rights view: ceiling, action classes, policy point, seat and shaded cells.
- Test a named holder against the six capabilities before a seat is drawn.
- Distinguish verified, declared and failed controls, and filled from hatched cells in an evidence view.
- Review one unit in six steps and write the decision record and its evidence row.
Key concepts
- Decision right
- The authority to say what an AI use may do, to change that, and to stop it. A decision right without evidence is a hope; evidence without a decision right is a report nobody has to act on.
- Ceiling and action classes
- The thick bar in V4 is the unit's ceiling: the highest autonomy level at which it may act for any action that changes something. Each thin bar is one action class with its own level. The seat sits at the end of the bar.
- Stop path
- The named people who may stop the unit, the mechanism they use and the time it takes. Contour gives it no glyph: the decision record names it, the drill measures it, and the evidence view shows it as a test result.
- Evidence and attestation in V5
- A filled cell is automatic evidence: a log, a test, a gate. A hatched cell is attested: a questionnaire answer, a contract clause, a signature. A hatched cell alone on a unit at R3 Hard to reverse is the question to ask.
- Verified, declared, failed
- A control is verified when a test that re-runs its scenario has passed recently and produced evidence by operation, declared when somebody says so, and failed when the test ran and did not pass. The evidence manifest behind each cell holds the result.
Interactive exercises
Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.
Interactive exercise 1 · Sort
Evidence or attestation
Sort each item by the cell it would fill in the evidence view: filled for automatic evidence, hatched for attestation.
Interactive exercise 2 · Put in order
Reviewing one unit
Put the six steps of the one-page review of a unit in the order the chapter gives them.
Teaching plan
| 10 min | Opening: the board meeting of 31 March 2027 at Hansa Mutual. The board asks one question, how long it takes to stop each agent, and moves a seat while the agent stays unchanged. |
| 25 min | Lecture on V4 with Figures 17.1 and 17.2: the tiers T0 to T4, the three seats that move, the six capabilities, the SOC investigation agent's thin bars, the shaded Level 4 cells, and why the stop path has no symbol. |
| 20 min | Lecture on V5 with Figures 17.3 and 17.4: Nordvik Region's pattern of building a little and buying a lot, and the three changes by the end of the year, including the supplier evidence schedule drawn hatched. |
| 40 min | Exercise: participants review one unit in the six steps and write its decision record and evidence row. |
| 10 min | Closing: three participants read their record as a board member, an auditor and an engineer would, and each states the one question their reader would ask. |
Discussion
- The chapter says a seat for someone who could not in practice stop the unit is worse than none. What does the board believe when it sees such a seat, and how would the six questions have prevented it?
- Contour refuses to draw the stop path as a symbol because a symbol would say there is a kill switch with nothing behind it. What does your organisation currently accept as proof that a unit can be stopped?
- Hansa Mutual's leverage is its platform and Nordvik Region's is the contract. Which describes your organisation, and what does that imply for turning hatched cells into filled ones?
Written exercise
Exercise · 40 minutes
A one-page review of one unit
Choose the mark that worried you most in your own landscape: a square at Level 3, a mark without a seat or a dashed baseline at R3. If you have none, take Hansa Mutual's IT-operations agent. Follow the six steps. Name the unit and list its action classes with their reversibility tiers. Set the ceiling per class with the reason, writing found, not decided where nobody set it. Name the holder and tier and test the name against the six capabilities. Find the policy point and trace the stop path: who, by what mechanism, within what budget, last drilled when and with what result. Sort the evidence into logs, tests and evaluations, gates and policies as code, and attestations. Write the finding in one sentence and the events that reopen the review.
Deliverable: A one-page decision record with holder, tier, ceiling per class, policy point, stop path and reopening triggers, plus the unit's hand-drawn rows in V4 and V5.
Self-test
Choose an answer to see whether it is right, or open the answer below each question.
Between 1 January and 31 December 2027, Hansa Mutual's ambient AI row gains a seat reading 2 while its bar stays at Level 4 Autonomous. Why is the bar unchanged?
Show the answer
C. Because the group cannot change what a vendor's product does; it can only add a seat
The vendors set the level. The head of the group AI platform, as owner of the AI inventory, takes the right to say which supplier-enabled features the group relies on and writes notice clauses. The bar is unchanged and the row still has no diamond.Why is Nordvik Region's supplier evidence schedule for the benefits-triage system drawn as a hatched cell in V5?
Show the answer
A. Because it is a dated set of declarations about the supplier's side: the supplier's word, next to the Region's own logs
The Region has always had its own logs, gates and tests for the system. The schedule adds dated declarations from the supplier, such as the notice period before a model change. It is drawn hatched because that is what it is. A hatched cell beside filled cells is honest.In the review of one unit, what follows from a no to any of the six capabilities of the named holder?
Show the answer
D. The seat is not drawn until every answer is yes
A name is necessary and not sufficient. The review asks the six questions before the seat is drawn; a no to any of them means the seat is not drawn yet, because a seat without the means tells the board the question is answered.