KNOWLEDGE BASE · GUIDE
The Monthly Proof Engine: AI Governance for a 10-Person Company
AI governance for a small company is a one-hour monthly ritual: the number that moved, the correction rate, the spend, and the stop or go call. You do not need a committee, a policy document, or a vendor dashboard. You need a date on the calendar, a baseline, and the discipline to write one sentence a month (skillpilotadvisory.ai/scan, verified 15 Oct 2026).
The ritual works because it is small. Most AI governance fails by building too much process before there is anything to govern. A ten-person company does not need an AI ethics board. It needs a monthly check that asks whether the AI initiative is paying for itself, and a person who owns the answer.
The one-hour monthly ritual
| Step | What you do | Time | What it produces |
|---|---|---|---|
| 1. Pull the CSV | Export one month of data for the workload AI touches | 10 min | One file, same columns as last month |
| 2. Name the line that moved | Compare this month to last. Did the metric you bet on change? | 15 min | One number, judged against your own definition of normal |
| 3. Count the correction rate | How often did the AI output need a human fix? | 10 min | One percentage, stated honestly |
| 4. State the spend | What did the AI initiative cost this month? | 5 min | One figure, including licences and time |
| 5. Make the call | Fund, fix, or stop. One word. | 10 min | One sentence your boss can read |
| 6. Write it down | One line: what moved, by how much, what it means | 10 min | The monthly proof record |
How this maps to MOSTI guidelines
Malaysia's National Guidelines on AI Governance and Ethics (MOSTI, published Nov 2024) name human oversight, accountability and transparency as expectations for AI use. The monthly ritual delivers all three:
- Human oversight: a person reviews the output and makes the call. AI never sets a score, changes a number, or invents a cause (skillpilotadvisory.ai/scan, FAQ, live 15 Oct 2026).
- Accountability: one named person owns the monthly number. The sponsor, not the tool, answers for the result.
- Transparency: the monthly sentence is the record. It states what moved, what did not, and what the decision is.
The ritual does not require a policy document. It requires a date, a baseline, and a person. Scan's monthly proof engine automates the calculation: upload two months of CSV, answer nine questions, and it names the one line that moved, judges it against your own normal range, and writes the sentence (skillpilotadvisory.ai/scan, fetched 15 Oct 2026).
What this does not cover
The monthly ritual governs one AI initiative, not a portfolio. A company running three AI initiatives needs three rituals, or one monthly meeting that covers all three in sequence. It also does not cover regulated AI use, where a compliance officer must sign before a model touches customer data. That is a separate gate.
Sources and context
- Scan's monthly proof engine: two months of CSV, nine questions, one line that moved, one sentence for your boss. 365 days of access, 30 AI credits (skillpilotadvisory.ai/scan, verified 15 Oct 2026).
- Most AI programmes fail the board test: spend rises while cost, attrition, revenue and cycle time barely move (skillpilotadvisory.ai/about, live 15 Oct 2026). The monthly ritual is the fix.
- Malaysia's National Guidelines on AI Governance and Ethics (MOSTI, published Nov 2024) name human oversight, accountability and transparency. The ritual implements all three.
- AI Malaysia was established on 28 July 2026 under the National AI Action Plan 2026-2030 (Marketing-interactive, fetched 11 Oct 2026). Governance pressure is rising. The monthly ritual keeps a small company ahead of it.
FAQ
How long does the monthly ritual take? About one hour if the CSV is ready. The constraint is pulling clean data, not the analysis.
What if nothing moved? That is a finding. State it. A month with no movement is not a failure. It is evidence that the initiative needs a fix or a stop, and the monthly ritual gives you the evidence to decide.
Do we need a governance committee? No. One named person who owns the monthly number is enough for a ten-person company. A committee adds delay without adding judgement.
What happens if the sponsor changes jobs? The ritual survives if the date and the baseline are written down. The new sponsor inherits the record. If the ritual lived in the sponsor's head, it dies with the sponsor's departure.