ATOM • White paper
A model for implementing enterprise AI tooling.
Every enterprise sees the opportunity in AI and is trying to turn it into value. But adoption is slow, the spend is climbing, and the real question is economic: is AI capital earning its keep against the human capital it should make more productive?
Spend is easy to see; value is hard to prove. The sticker shock arrives, and renewals and expansion stall.
OpenAI, Anthropic, Google, and Microsoft keep moving quickly, and enterprises have bought broad access. But most people still use the tools like faster chatbots, and the value never reaches the work.
The gap is everything around the tools: context, permissions, review, memory, and proof. ATOM makes those pieces explicit, reads the work through six pillars, and shows whether the economics hold. The rest of this paper is how.
01The Missing Middle
Most enterprises have plenty of AI tools. What they're missing is the layer between the tools and the daily work — the part that decides what context the AI sees, what it's allowed to do, what's worth keeping, and how anyone can tell it's working. It helps to see the whole thing as four layers.
The rented tools the work draws on — useful, but not the work system itself.
The customer-owned work coreTwo layers the enterprise owns: the work, and the rules it runs within.
Layers 2 & 3 · ownedWhere people and agents do the work.
The structure around the work — contracts, governance, security, policy, and memory.
The rules decide what connects — and what it may touch.
The enterprise’s own systems and data — the third-party products it runs and the records they hold.
The tools on top are rented and the systems below are fixed. The middle is the part an enterprise owns, and it's where the work is won or lost. Today that middle is a tangle: people stitching tools, context, and systems together by hand. ATOM replaces the tangle with clear rules for context, action, review, memory, and proof. The tools above and the systems below exist to serve the work.
02What ATOM Keeps Separate
ATOM keeps four things separate that tend to get blurred together. When they blur, a method starts to sound like a product, the delivery scaffolding starts to sound like customer software, and tooling gets implied before anyone has agreed there's a real gap.
The framework
the lensThe concepts, boundaries, and maturity model for making sense of enterprise AI work.
ProducesA shared language for work, context, control, evidence, ownership, and measurement.
The engagement method
the methodHow an engagement is scoped, baselined, configured, enabled, read, and pointed at what to build next.
ProducesA staged motion that adapts to each customer.
Internal delivery tools
team-sideBaseline builders, inventories, contracts, receipts, readiness gates, readouts.
ProducesConsistent, rigorous delivery; they never become customer software.
Customer software
optional · gatedSource registers, context registries, review workflows, enablement and custom agents.
Enters scope only whenthe tools already owned plus the method leave a real gap.
The framework and the method are always part of the work. The delivery tools keep delivery consistent. The customer software is where it gets interesting, and it earns its place only when the tools already owned and the process leave a real gap, which is most of section 6.
03Start With What's Already There
A modern enterprise AI platform already does a great deal: identity and access, admin controls, connectors, analytics, audit, retention, skill and agent directories, runtime controls. The first job is to use those properly, configured against the enterprise's real work, before building anything new. ATOM uses the stack already in place; it doesn't replace it.
| Who owns it | What they own |
|---|---|
| The AI stack already owned | Admin console, identity hooks, connectors, analytics, audit APIs, skills and agents, runtime and retention controls |
| The customer | Policies, data classification, access decisions, source approval, role and workflow priorities, KPIs, governance cadence, risk tolerance, the definition of success |
| ATOM | Discovery, configuration design, source/context/skill/action contracts, baseline data, receipts, evidence states, the readout, the operating memory, and the expand/build/stop decisions |
Making the environment explicit is the real first job, and it's enterprise configuration design. These are the categories that drive the discovery:
| Category | What has to be understood |
|---|---|
| Identity and access | Users, groups, departments, contractors, admins, SSO, custom roles, access review |
| Security, privacy, and compliance | Data classes, regulated and customer data, retention, audit, legal holds, privacy boundaries |
| Runtime controls | Devices, networks, repos, terminals, cloud environments, allowed tools and domains, action approvals |
| Work tools | Chat, projects, copilots, coding assistants, docs, collaboration tools, internal apps |
| Connectors and source systems | Drive, email, chat, CRM, warehouse, BI, tickets, code, calls, support tools, telemetry |
| Context hierarchy | What context belongs to the org, a function, a role, a workflow, an account, or a person |
| Skills, agents, and tools | Approved work patterns, allowed and blocked actions, review rules, internal and external tools |
| Analytics and audit | Usage, adoption, cost, audit logs, compliance exports, reporting cadence |
| Roles, work, and KPIs | Job families, teams, workflows, responsibilities, manager expectations, success metrics |
| Governance rhythm | Decision rights, steering cadence, source approval, promotion decisions, access review, escalation |
| Economics and success | Cost model, the model mix the customer owns, time saved, quality, rework, productivity, risk reduction |
These are the customer's calls to make. An implementation partner can shape, accelerate, pressure-test, and document the work and put it into operation, but the policies, sources, roles, context, approvals, and definition of success stay with the customer.
04The Engagement
The engagement's shape depends on scope. A focused team can move in months; a large rollout becomes a multi-quarter program with a full-time internal owner, because the work touches AI platforms, security, data, enablement, engineering, operations, finance, legal, and the business. What stays consistent is the method, and it tends to go in three gears.
Alignment & scope
Pick the first part of the business, the owners, the tools involved, and the proof point — and what's explicitly out of scope.
Foundation
Configure the existing tools to that work: inventory tools, sources, roles, context, policy, skills, and agents. Set the baseline.
Active use
Real users do real work through configured tools, approved context, playbooks, contracts, receipts, and readouts.
Expand the system
Decide what expands, what stops, what changes, and what becomes customer-owned tooling or custom-agent work.
Crawl — foundation. Get the first area of the business under review using the tools that are already there. Inventory the tools, work, roles, sources, and context; write the first context and skill/agent contracts; set the security and policy baseline; and take a measurement baseline so there's something to improve against. This is configuration and light records the customer can read and approve: the existing tools, used properly.
Walk — active use. Put real people into the configured system doing real work with configured tools, role and workflow playbooks, approved context, review rules, and a steady enablement rhythm. This is where setup turns into adoption, and where the first real evidence of what's working shows up: receipts, the context and source registries, and the first six-pillar readout.
Run — scale. Where the evidence supports it, go deeper and wider: more teams, more of the work, and the customer-owned software the proof has shown is worth building. This stage is earned by what the earlier work shows.
Two things hold throughout: the customer owns the decisions — policy, sources, roles, risk, and the definition of success — and the pace follows the evidence.
05Seeing What's Working: The Baseline and the Six-Pillar Readout
Every engagement starts with a baseline: an honest read of how an enterprise's AI work looks today. It's produced with tooling (section 6), and it becomes the reference point for what improves. Both the baseline and the ongoing work are read through six pillars: the same six that set the baseline, track improvement, and decide where to invest more and where to pull back.
Is the value worth the spend — judged against the role and its KPIs, not just seats and tokens?
What context was available, approved, missing, stale, blocked, or overloaded?
What policies, permissions, actions, review rules, and gates shaped the work?
What became reusable knowledge, what stayed local, and what should be retired?
Did the work improve — cycle time, quality, decision quality, business outcome?
Can the work survive a change of model, vendor, tool, team, or workflow?
Early on this is a service deliverable and a management rhythm — the readout that tells leaders what to configure next, what to enable, what to stop, and where to put the next dollar. Once an enterprise knows what it wants to operate, the same six pillars become a standing dashboard on its own data. That's a piece of software, and it's the next section.
06The Software Behind ATOM
The method has real software behind it, and it comes in two forms.
The proof product is what the delivery team uses to set the baseline. It maps the people, roles, workflows, tools, sources, connectors, policies, and analytics of a real environment; shows the gaps, missing data, and weak or unsafe evidence; and produces the first six-pillar readout. It makes understanding the environment concrete, fast, and repeatable on every engagement.
The installed product is software the enterprise owns and keeps. It's the persistent version of everything the proof finds: the source-state and context registries, the skill and agent contracts, the receipts and gates, retrieval across tools, approved context where people work, and standing six-pillar reporting, all running on the enterprise's own data. Because every enterprise's systems and data are different, this system is adapted to each one, and that is where the meaningful custom development happens in a major engagement.
Architecturally, both are built from the same set of instrumentation, sitting across the tools already owned and the enterprise's systems:
The proof product
Maps the people, roles, workflows, tools, sources, connectors, and policies of a real environment; shows the gaps, missing data, and weak evidence; and produces the first six-pillar readout.
What it givesUnderstanding the environment becomes concrete and fast on every engagement.
The installed product
Software the enterprise owns and keeps: source and context registries, skill and agent contracts, receipts and gates, retrieval across tools, and standing six-pillar reporting, on its own data.
What it givesA living work system, adapted to each enterprise, where the custom build happens.
| Component | What it does | In the proof product | In the installed product |
|---|---|---|---|
| Discovery and baseline | Maps the environment and sets the first read | Baseline pack across people, work, sources, policy, analytics | A recurring intake and environment map with change history |
| Configuration design | Turns the baseline into configuration for the tools already owned | Configuration workbook and decisions | Durable configuration records with ownership and approval |
| Source and context contracts | Defines what can be used, reused, promoted, or blocked | Inventories, contracts, freshness and authority labels | Source-state registry, context registry, promotion ledger |
| Evidence, receipts, and gates | Tracks what was used and what claims are safe | Receipts, claim boundaries, review rules | Automated gates and audit-ready evidence |
| Enablement | Turns configuration into changed behavior | Role playbooks, workflow cards, manager rhythm | A permissions-aware enablement assistant in the workflow |
| Measurement | Turns platform analytics plus business metrics into proof | The six-pillar baseline | Ongoing six-pillar reporting and economics |
| Operating memory and retrieval | Keeps durable, customer-owned state and serves it where work happens | Light, manual where needed | Persistent record and retrieval across tools |
| Control plane | One view of adoption, source health, risk, cost, and decisions | The executive readout | A standing dashboard on the enterprise's data |
What it delivers lands in three places: the enterprise gets lower risk and better decisions about where to expand and what to build; the people get faster, easier, safer, higher-quality work through approved context and in-flow support; and delivery gets a repeatable way to run engagements without reinventing the same work each time.
The software is at different stages of maturity: discovery and baseline are in use now, and the installed product is partly built and grows with each engagement. Maturity matters less here than the substance: the software is real, it's architected, and it's a genuine opportunity for custom development tailored to each major engagement.
07From Proof to Expansion
Custom agents are a real expansion path, but they come later, not first. The first engagement gives an enterprise immediate value: clearer workflows, safer use of context, better enablement, cost visibility, and evidence for management. It also shows where the deeper work pays off: the sources, permissions, integrations, costs, usage, blockers, and business signals that real work depends on. That's what turns "should we build an agent?" from a guess into a decision.
First engagement
One real part of the business — owners, a proof point, and a clear boundary.
Work system
Context, policy, review, and governance stood up around that work.
Operating proof
Receipts, telemetry, cost, outcomes, blockers — what is happening.
Qualified expansion map
The evidence, turned into a decision: what is worth expanding, configuring, or building next.
The qualified next work — earned by evidence
Scale the lane
More teams and more of the work, on the same operating core.
Deepen native configuration
Push the enterprise's native AI tools further before building anything new.
Customer-owned software
Source registers, context registries, readouts — where the tools already owned plus process leave a gap.
Custom workflows & agents
Delegated work, now credible because the users, sources, controls, and economics are known.
| Next move | When it's the right one |
|---|---|
| Scale the lane | The approach is working; take it to more teams and more of the work |
| Deepen native configuration | There's more to get from the tools the enterprise already owns before building anything |
| Build customer-owned software | The tools already owned plus the process leave a real gap worth closing with the installed product |
| Commission custom workflows and agents | The users, sources, permissions, economics, and success measures are known well enough to delegate work with confidence |
Each of those has to be earned — and an enterprise gets a reason to start before the whole path is obvious.
08Where It's Proven, and Where It's Emerging
I want to be straight about where this is proven and where it's still emerging, because it's the most honest and useful part of this.
Knowledge work is proven, and it's where I've spent my time. I've spent years in this work, and the last couple of years architecting AI around it: context engineering, prompt design, connectors, security, guardrails, and the practical setup that helps a person do their actual job. The approach here is mature and straightforward: build the structure around the user so the system supports the work. I use it, my customers use it, and they grasp it quickly.
Engineering is an honest bet, not a finished model. I'm not a career engineer; I haven't spent decades inside large engineering teams, and I won't pretend the gaps in that experience don't matter. I've built and I understand engineering harnesses in small-team development, so I get the concept: a developer working with coding agents needs the right structure around the team, the product, and the work, the same way a knowledge worker does. I think the opportunity is large, and I've done real work framing it. But for my business this is emerging: the highest-value pieces, including what the custom software for an engineering team should be, will only become clear after seeing the work across a large engineering organization. I'd rather say that plainly than claim a finished model I don't yet have.
The principles travel across both: the same primitives sit underneath, and only the domain contracts change.
Knowledge work
Proven todayThe strongest current evidence — where source authority, context, drafting, review, and handoff drive the result.
Engineering & coding agents
EmergingCoding agents act on production code, secrets, and irreversible changes — so it stays specialist-led until sandboxing, test and CI evidence, review, and rollback are proven.
| Primitive | Knowledge work | Engineering |
|---|---|---|
| Work object | Account brief, research memo, meeting follow-up | Spec, ticket, pull request, test result |
| Source state | CRM current, transcript available, thread missing | Repo clean, dependencies proven, tests passed |
| Context contract | Approved account context, allowed customer data | Approved spec sources, codebase boundaries |
| Skill/agent contract | Meeting prep, call closeout, account research | Code review, migration plan, test repair |
| Receipt | Context used, output created, reviewed | Evidence bundle, test result, PR checks |
| Gate | Missing source, sensitive data, approval needed | Lint, test, type, security, spec mismatch |
09What a Practice Can Standardize
A practice can standardize how it works; the customer's answer stays their own.
What can be standardized: the intake for a first engagement, the baseline dataset, the contract structure for work, context, action, review, and evidence, the existing-tools-first approach, the enablement rhythm, the receipt and proof model, the six-pillar readout, the expand/build/stop decision, the delivery tools that keep it consistent, and the language for what's proven versus what's emerging.
What stays specific to each customer: the work that matters first, the approved tools, the source hierarchy, the risk boundary, the proof their buyer needs, the governance cadence, the appetite for owning software, and the path into custom workflows or agents.
That's what keeps the work repeatable and still theirs.
10Closing
ATOM is a way to implement enterprise AI tooling. It starts with the environment an enterprise already has, configures the tools against real work, makes context and action reviewable, reads the work through the six pillars, and uses that evidence to decide what to expand and what to build.
The aim is to help an enterprise make its AI something the business controls and its people use on the work that matters, then build the software that makes that last.