~8 months
Capability compresses review time
Review windows are shrinking.
42% of well-scoped hour-long software tasks completed by mid-2025.
Why now • Observed signals only
WHY NOW
Evidence has to move upstream.
Capabilities are outrunning review cycles. For consequential AI, proof has to be present before action.
Pre-action controls. Offline-verifiable. Ticket-attachable. Fail-closed on uncertainty.
THREE SIGNALS
The control gap is now operational.
Acceleration, uneven safeguards, and action-taking autonomy now outpace most governance cycles.
R² = 0.097
Capability does not predict control
Capability does not reliably bring stronger safeguards.
Vulnerabilities still appear across tested systems.
High-stakes actions
Autonomy enters operations
Action-taking AI is entering consequential workflows.
Governance has to move to the point of action.
The control gap is now operational.
Source: UK AI Security Institute, Frontier AI Trends Report. Observed evaluations — not a forecast.
Enterprise corroborationSecondary signal
Enterprise trust is entering the quantified era.
Buyers are moving from demo trust to measurable reliability, production-grade evaluation loops, and portable evidence across agent stacks.
Additional corroboration: Snowflake AI + Data Predictions 2026.
WHAT PROCUREMENT REQUIRES NOW
Proof has to survive independent replay.
For action-taking systems, acceptable evidence is replayable, offline-verifiable, and fail-closed when scope or authenticity cannot be established.
Pre-action controls
Control must exist before the action, not after the incident.
Replayable proof
Reviewers need artifacts they can verify independently and attach in one pass.
Fail-closed semantics
If scope or authenticity cannot be verified, the ticket stays HOLD.
Policy timing appendix
Regulatory dates still matter, but they are no longer the lead story. Use this appendix to align planning, questionnaires, and board updates.
SOURCES
Primary evidence
Observed signals for this page come from AISI and Meridian verification materials, with one enterprise corroboration source.