The Next Enterprise Era. Why a working model was never the hard
part, the four rings that contain an unreliable one, and what the controls cost.
What the film says, in text
There is no speech in the film, so there is nothing to caption. Everything it says
is written on screen, and this is that text.
Your model works. That was never the hard part. Then the real
questions arrive: which version of the policy did it use; could it reach another
customer's data; who authorised that tool call; what happens after a timeout; can a
document tell the model to ignore its controls; how do we reproduce a decision made
three months ago. Not one of them is a model question.
An assistant produces information that a person then acts on.
An agent acts. Consequence, not output — that is the whole change.
So the enterprise encloses it. Probabilistic reasoning sits at the centre, free to
be wrong. Around it, deterministic control holds invariants, state and commit
authority. Around that, governance holds identity, tenancy, purpose and policy.
Outermost, an evidence and outcome loop records what happened and whether it worked.
Four rings, each answering a question the model cannot.
The enterprise does not make the model reliable. It makes the model's
unreliability survivable.
Three proposals cross one authority and control boundary. A £40,000 credit
adjustment is committed, inside policy and limit, with evidence written. A contract
variation with an unseen clause is deferred, because no rule covers it and a named
human decides. An export including another tenant is refused, because it breaks a
tenancy invariant, which is never negotiable. Same model, three outcomes: the
boundary decided, not the model.
And the control layer costs about one 358,000th of a single forward
pass. Control is not the expensive part. Not having it is.