Clarity Diagnostic (2–4 weeks) Current‑state map and breakpoints 90‑day play with owners Executive brief with targets
Minimal Viable Governance (4–6 weeks) Decision rights + change cadence Standards roster + exception log Risk board and charter template
AI Guardrails Lite (3–4 weeks) Use‑case register + risk screen Policy and consent patterns Monitoring checklist