I think the most consequential AI work begins with the structure of an organization: what its roles are for, what they know, how they exchange information, and who decides when the situation stops being routine. A capable model becomes more useful when those relationships are explicit.
This is the overview of that idea. ThoughtSpace describes the context around a role. RoleOS gives repeatable work an inspectable structure. Governance supplies direction. Contracts and events connect the parts. Together, they form my working model of an AI-native enterprise.
The thought shape of a role
Imagine the knowledge needed to do a job as a space. An experienced customer success manager knows renewal dates, product limitations, stakeholder relationships, the promises made during a sale, and the difference between an ordinary support issue and an early sign of churn. Those facts matter in relation to one another.
I call the bounded context around that role its ThoughtSpace, and use “thought shape” to describe the structure inside that boundary. Its facets include institutional knowledge, domain knowledge, relationships, tools, and judgment. Its layers run from the outcomes the role produces down through functions, tasks, and the data those tasks touch. Its edges identify what the role does not own.
Those edges are useful. A customer success manager may identify an expansion opportunity without having authority to approve a discount. Finance owns a different decision, with different evidence. Defining both roles makes the handoff visible before an agent attempts to cross it.
This geometry is a design metaphor for organizing context. My sparse-autoencoder research asks separate empirical questions about learned representations; it does not establish that departments or human roles correspond to particular regions inside a model.
Choosing the altitude of a decision
The same organization looks different at different levels of abstraction. An analyst sees specific records, steps, and tools. A functional leader sees how those activities combine to produce an outcome. An executive considers which outcomes the organization should pursue and which tradeoffs it will accept.
I use the phrase Executive Incompleteness for a limitation in this picture: improving execution inside a frame does not, by itself, settle whether the frame is worth pursuing. Someone remains responsible for deciding what it is for, what it excludes, and when it should change. That is a leadership principle I am proposing, rather than a mathematical theorem.
More capable execution raises the stakes of that choice. A system can become very effective at an objective that no longer serves the customer or the business. I want the objective to remain visible at every level, so that local improvements can be questioned against the larger purpose.
Governance gives the system direction
In my model, governance begins with an executive charter. The charter defines the destination, the principles that constrain acceptable ways of reaching it, and the common structure departments use to describe their work. A metric helps measure progress; it does not replace the destination.
Functional leaders then translate that charter into local objectives. A support team might care about resolution time, but reducing time by closing unresolved tickets would undermine the wider goal. Its objective needs to account for the outcome it creates for customers and for the teams receiving its handoffs.
Direction, capabilities, and evidence
- Executive charterPurpose, principles, and decision rights constrain every layer below.
- Roles and functionsLocal objectives become bounded capabilities and accountable handoffs.
- Events and contractsExplicit payloads carry information between the capabilities.
- Data foundationOwned, described, usable records provide the evidence.
The charter constrains local decisions without prescribing every tool. I develop this argument in Governance as the objective function.
Collect the dots before connecting them
A role cannot reason usefully over information it cannot find or interpret. I begin with three questions about the data: who owns it, what does it mean, and how trustworthy is it for this use?
Ownership identifies an authoritative source and someone responsible for resolving discrepancies. Metadata describes fields, update frequency, provenance, and intended meaning. Quality assessment checks whether those records can support the proposed function. An account record that is adequate for a mailing list may be inadequate for a billing decision.
Readiness should determine the order and scope of implementation. A department with dependable, well-described data may be ready to expose a function. Another may first need to repair identifiers, establish ownership, or clarify permissions. I do not want an elegant contract to conceal an unreliable input.
Map the work before encoding it
Within a role, look for work that recurs. The trigger may be scheduled, requested, or reactive. A complaint is unpredictable in its arrival, but parts of the response may still follow a recognizable structure.
For each function, define its input, transformation, and output. What must be present before work starts? What steps and tools produce the result? What does a usable result contain, and who receives it? The number of functions depends on the role and the chosen level of detail; a fixed count is less useful than a map that practitioners recognize.
Record a baseline alongside that map: time per run, frequency, errors, rework, and the human decisions involved. Without it, a faster-looking demonstration can be mistaken for an improvement in the work itself.
RoleOS is my filesystem-based pattern for encoding this structure. Role-level files establish identity and shared constraints. Function-level files define the work. Run-level files hold inputs, outputs, handoffs, and review evidence. The separation lets an agent load the context it needs while keeping the role understandable to its operator.
Contracts make the handoff explicit
A canonical contract describes the payload exchanged between functions: fields, types, required values, and meaning. “At-risk account” is too loose for a dependable handoff unless both sides agree on what the record contains and why it was flagged.
When the output of one function satisfies the input contract of another, the functions can be connected. Schema validation catches malformed records at the boundary. It cannot establish that every value is true; source checks and evaluation still matter.
Across departments, I call this interface the Role Programming Interface, or RPI. A department publishes the capabilities others may invoke, their input and output schemas, service expectations, and failure behavior. The implementation can evolve behind that interface. If the contract itself needs to change, it should be versioned and its consumers given a migration path.
Events put the architecture in motion
I treat an event as the basic signal that work may be needed: a meeting ends, a deal closes, a usage threshold is crossed, or a customer writes in. The event gives relevant capabilities a reason to refresh their context and consider a response.
After a meeting, one capability might update account context, another draft a follow-up, and another identify a product request. Each uses the same occurrence for a different purpose. A named person handles decisions above the system’s authority. The approved outcome can then become another event.
This connects to my event-driven operating model. The practical challenge is making the subscriptions, ownership, failure paths, and approval boundaries as explicit as the happy path.
Context pipelines move decisions between teams
A context pipeline applies familiar data-pipeline stages to a handoff: ingest, enrich, clean, validate, and route. It aims to deliver enough evidence for the next team to act without reconstructing the entire situation.
Consider an illustrative support case. A 400-seat customer files a third login ticket in a month. The account context adds a $180,000 annual relationship, a renewal in 74 days, a falling health score, and the departure of the main champion. Customer success receives the combined situation and a draft response, rather than three isolated tickets. The figures describe an example, not an observed customer outcome.
Or consider a closed deal. A sales call includes a promised dashboard that does not appear in the signed contract. A pipeline extracts commitments with sources, owners, and dates, checks them against the contract, and flags the mismatch for the handoff. The goal is to expose disagreement before it becomes a surprise at kickoff.
An approved expansion can continue into Billing with the product, seat count, region, dates, approved discount, and approver already attached. Each stage receives a defined payload. That is how I think about reducing the translation tax: the effort and context lost when people repeatedly reconstruct what another team meant.
Turn a signal into a usable handoff
- IngestRetain the event and its source.
- EnrichAdd relevant account and operational context.
- CleanResolve identifiers and distinguish facts from inference.
- ValidateCheck the schema, authority, and unresolved discrepancies.
- RouteSend a defined payload to the responsible capability or person.
Trust needs evidence from real runs
I would begin with shadow runs alongside the existing process, retaining both outputs. Compare fields and outcomes, investigate disagreements, and track whether performance changes over time. The human result is a useful reference, but disagreements still need adjudication; neither side should automatically be treated as correct.
Every run can contribute four kinds of evidence: corrections, performance metrics, review flags, and contextual memory. A recurring correction might justify changing a standard. Repeated uncertainty might reveal a missing input. Neither should silently become permanent policy after a single run.
What the leverage math actually says
A simple model helps explain why faster automated work does not translate directly into the same speedup for a whole role. Let j be the fraction of original time that remains human judgment, and s the speedup of the remaining work. With no additional overhead, the resulting speedup is:
Role speedup = 1 / [j + (1 − j) / s]
If judgment takes 30% of the original time and the rest becomes ten times faster, the role-level result is about 2.7×. At a 15% judgment share and the same automation speedup, it is about 4.3×. At 15% and twenty times faster automated work, it is about 5.2×.
Faster execution still meets a human bottleneck
Illustrative whole-role speedup · common scale: 0–6×
These are illustrative calculations, not measured results or a productivity promise. They assume unchanged output quality and exclude integration, review, coordination, and rework costs. Their value is showing the bottleneck: the quality and effort of human decisions still matter, even when execution becomes much faster.
That is the direction I want this architecture to serve. Give people better context, make routine work inspectable, and create room for the decisions that deserve their attention. Whether it achieves that has to be established through the work.
Adapted for this notebook from my AI-Native Enterprise: Core Concepts (Oct 2026).
The complete essay series ↗