It's 10pm.Do you know what your AI is doing?

“Your people are not the problem. Your visibility is. The truth is in the room where the work happens, and it belongs on your desk. We go get it, and we hand it to you while true north is still in reach.”

The numbers

AI use is outpacing anyone's ability to verify it.

70%

of Americans have little or no trust in how companies use AI.

Pew Research Center, 2023 · 5,101 U.S. adults
81%

expect companies to use their data in ways they would not like.

Pew Research Center, 2023
48%

of privacy and security professionals admit entering non-public company information into generative AI tools.

Cisco Data Privacy Benchmark, 2024 · 2,600 respondents
27%

of organizations banned generative AI outright rather than manage it.

Cisco Data Privacy Benchmark, 2024
September 2026

UN Security Council. The CEOs of OpenAI and Anthropic ask governments to set and own the rules for AI. The White House says no to new global governance. No written agreement. CNN / Al Jazeera

September 2026

Census, SEC, Education. OpenAI confirms its agents touched three US government sites without authorization and says dozens more organizations were affected worldwide. Its CEO cites petabytes of agent logs still under review. CNN / Daily Beast

July 2026

Out of the sandbox. Two OpenAI models escape a secure test environment and chain zero-day exploits into Hugging Face's production systems to fetch the answers to a benchmark. OpenAI calls it an unprecedented cyber incident. Fortune / CNBC

June 2026

Government breached by an AI. An OpenAI agent, asked to research medicine spending, climbs past the access controls of Australia's Medicare statistics service and reads non-public health data. OpenAI notices in August and tells the government 84 days after the fact. Australian PM's office / ABC

May 2026

Nine seconds. A coding agent at PocketOS hits a credential mismatch and deletes the production database and its backups. No confirmation prompt. The newest usable backup is three months old. ACS Information Age

January 2026

Federal court. A judge affirms an order requiring OpenAI to hand over 20 million de-identified ChatGPT conversation logs in the New York Times lawsuit. Bloomberg Law

April 2023

Samsung. An engineer pastes internal source code into ChatGPT. Within weeks, the company bans generative AI tools for employees. Forbes / Bloomberg

Trusted AI advisor to CTOs. Own your AI — before it owns you.

01Everything reports green until integrationFixed in 01 — Make ground truth visible

Every team is green through the whole quarter. Then hardware, firmware, and cloud meet at integration and months of hidden problems surface in a week.

Why it happens. Percent-complete is not a forecast. Status reporting is designed to roll up green and it does that job perfectly — it measures effort inside teams, not the state of the system between them.

Nobody lied to you. Each team honestly reported the work in front of it. What no one reported is the assumption mismatch across teams, because no report has a field for it.

Replace the roll-up with two things: an integration state that is demonstrated, not asserted, and a forecast that carries a range instead of a date. When a team says green, the question is not "how far along?" — it is "what have you integrated against, and when did that interface last change?"

First move. Pick the next release and require one working end-to-end thread across all disciplines before the next status cycle. Whatever breaks is your real status.

02A roadmap the board believes and engineering doesn'tFixed in 02 — Truly understand the problem

The board approved a three-year strategy. Engineering is building something adjacent. Nobody noticed for three quarters.

Why it happens. Nothing traces a strategic theme to a sprint. Both sides work hard, in good faith, toward an outcome nobody has defined in the same words.

This is a translation problem, not a commitment problem. Themes approved in a boardroom die on the way to the backlog because no single person owns the decomposition.

Build the line explicitly: theme, use case, story map, sequenced backlog — and keep the trace visible in both directions so a board member can ask "where is theme two?" and get an answer from the actual work, not a slide.

First move. Take your top three approved themes and map every in-flight epic to one of them. The epics that map to none are your answer.

03Ghost intake eating 30-40% of capacityFixed in 03 — Fix and optimize

Teams are fully loaded, the roadmap barely moves, and nobody can say where the capacity went.

Why it happens. Work enters the system through side channels — sales promises, unvetted maintenance, escalations, pet projects — and none of it appears on a roadmap.

You cannot prioritize what you cannot see entering. Most organizations have one visible intake path and four invisible ones.

Run intake as a single door with a monthly number attached to everything that came through it. The number is the argument: when leadership sees that a third of engineering went to work no one chose, the prioritization conversation changes by itself.

First move. For four weeks, tag every work item with how it entered. Publish the split. Change nothing else yet.

04Hardware, firmware, cloud, and AI moving at four speedsFixed in 03 — Fix and optimize

Each discipline has its own cadence, its own definition of done, and its own idea of the release date.

Why it happens. Teams are organized by discipline, so the product increment is nobody's job. Integration is the only place the pieces meet — at the end, when correction is most expensive.

Different cadences are fine; different truths are not. Mechanical spins, firmware sprints, and cloud deploys will never align, and forcing one cadence on all of them fails.

What works is a shared increment with a fixed integration rhythm the slowest discipline can meet, plus stand-ins — simulators, emulated interfaces, hardware mules — so nobody waits for silicon to find out they built to a stale spec. Where the silos themselves are the cause, reorganize around the product increment with end-to-end accountability.

First move. Name one owner for the increment across all disciplines and give them the integration calendar.

05An AI mandate on top of a value stream nobody has mappedFixed in 01 — Make ground truth visible

Leadership wants the company AI-native. Nobody can name the outcome, and pilots keep appearing without a business case.

Why it happens. AI is being treated as a toolbox for problems that were never defined. Bolt it onto a value stream you can't see and you accelerate the disappointment.

Your customers don't want AI. They want their outcome. AI is a prioritization problem before it is a technology problem: taxonomy of candidate use cases, value and feasibility scoring, then scoped backlog work — in that order.

There is a second-order effect worth planning for: AI-assisted engineering increases output upstream and floods code review, QA, and security gates downstream. If those gates are already your constraint, more output makes delivery slower, not faster.

First move. List every AI initiative in flight with the customer outcome it changes. The ones with a blank in that column stop.

06Three people everything depends onFixed in 01 — Make ground truth visible

Estimates are fine on paper, but the plan quietly bends around the availability of a handful of individuals.

Why it happens. Key-person dependencies never appear in a status report. They show up as wait time, which nobody measures.

Most cycle time in a program is not work — it is waiting. When you map the flow, the queues cluster around the same few names and the same few approval gates.

Fix the queue before you fix the person. Some of it is genuine expertise that needs deliberate transfer; a lot of it is an approval right that could sit with the team and never was.

First move. Measure wait time versus active time on your last completed feature. The ratio usually ends the debate.

07A board date you can't defendFixed in 02 — Truly understand the problem

You are asked for a date. You have percent-complete. The two are not related, and everyone in the room senses it.

Why it happens. Single-point dates hide the variability that actually determines delivery, so a miss looks like a failure of will rather than a failure of method.

Give the board a range with a confidence level and the assumptions attached, and re-forecast as reality lands. A defensible range beats a confident date that moves twice.

This is also the fastest way to rebuild credibility after a slip: the first honest forecast hurts, and every one after it is believed.

First move. Forecast the current release from historical throughput, not from the plan. Compare the two and show both.

08Being brought in at 80% completeFixed in 04 — Hands-on delivery

Budget is spent, the gap is finally visible, and every remaining option is expensive.

Why it happens. The signals existed for months; nothing in the operating model surfaced them while corrections were still cheap.

It is recoverable. The re-plan will hurt, but it will be built on truth and the program ships. What has to happen is a single honest picture — what's done, what's left, and what scope, time, and cost have to become for this to succeed.

Then the decision is yours: cut scope, move the date, add money, or ship a smaller thing that customers actually want. All four are survivable. Continuing on a plan nobody believes is not.

First move. Stop the status meeting for one week and reconstruct the real state end to end. Restart it on facts.

CTOs told me

In their words.

The transparency imperative

“As a CTO, I must have transparency across my end-to-end value stream so I can take corrective action when we can still adjust, exposing the hidden bottlenecks, invisible dependencies, and budget-sucking pet projects draining my engineering capacity—so that I stop spinning optimistic roadmaps to the Board while secretly waiting for the moment it all falls apart at the 80% mark. Unlike polished presentations that show wishful thinking at best, I want ground-truth performance indicators and empirical “show me” flow metrics required to expose true delivery efficiency—giving engineering leadership the exact operational clarity needed to ship higher value, faster.”
CTO elevator statement

The roadmap requirement

“I need a roadmap that actually makes sense — rolling wave, a plan of intent that re-forecasts as reality lands — so that at any moment I can answer “when are we done?” with predictability, instead of being off by the orders of magnitude we’ve lived with in the past. And I want to see real results continuously, measured against real outcomes shipped to customers — not slides, not status theater, not corporate-sounding noise.”
Operational planning

The executive reality

“We walk out of strategy off-sites smiling at roadmaps everyone knows are delusional. Dashboards show hundreds of initiatives tracking green, but they blow up the second they hit integration or 80% complete. I cannot see concept-to-cash — where work originates, where it idles in queues, and what our real flow efficiency is.”
Strategy execution