Your team already adopted AI agents. Your governance didn't.
Draft — outline pending Phase 2 review (what can be published about FORGE is being finalized). Structure and argument are real; details will be filled in.
Ninety-seven percent of engineering organizations report their developers use AI coding tools. Around thirty percent have any form of governance over what those tools do. That gap is not a statistic — it is an incident report that hasn’t happened yet.
I spent the last year building and operating FORGE, a governance system for AI-agent adoption in engineering teams, evaluated in production with a real team. This is what the gap looks like from inside, and what actually worked.
The gap nobody owns
- AI adoption arrived bottom-up: individual developers, individual editors, no shared rules.
- Security reviews cover the code, not the process that produced it.
- The failure modes are new: an agent that deploys through the wrong mechanism, a secret pasted into a prompt, a “fix” applied to the symptom because nobody demanded a root cause.
What governance actually means for agents
Not a policy PDF. Working agreements that live where the work happens:
- Team memory that is committed, not tribal — decisions, lessons and environment state in the repo, readable by humans and agents alike.
- Kill gates before irreversible actions — an adversarial review step that tries to kill a plan before it ships, not bless it after.
- Safety tiers — classify changes by blast radius; risky ones pause for a human.
- A lesson loop — every resolved incident becomes a rule the next session loads automatically. Governance that doesn’t compound is theater.
What production taught us
(to be expanded: 2–3 anonymized field stories — the wrong-mechanism deploy, the over-generalized rule, the secret that almost shipped — each ending in the rule it produced)
Where to start Monday
A minimal version any team can adopt in a week, no tooling purchase required.
I’m Miguel Cárdenas, Fractional Platform Lead. I help teams of 5–50 devs run their platform — and adopt AI without losing the plot. If this gap sounds familiar, let’s talk.