ATOM White paper

Latif Horstpoint of view

A model for implementing enterprise AI tooling.

Every enterprise sees the opportunity in AI and is trying to turn it into value. But adoption is slow, the spend is climbing, and the real question is economic: is AI capital earning its keep against the human capital it should make more productive?

The dilemma every leader is hitting
adoption grows →
AI spend climbs with every new seat and tool.
Value realized stays flat — it never reaches the work.

Spend is easy to see; value is hard to prove. The sticker shock arrives, and renewals and expansion stall.

OpenAI, Anthropic, Google, and Microsoft keep moving quickly, and enterprises have bought broad access. But most people still use the tools like faster chatbots, and the value never reaches the work.

The gap is everything around the tools: context, permissions, review, memory, and proof. ATOM makes those pieces explicit, reads the work through six pillars, and shows whether the economics hold. The rest of this paper is how.

01The Missing Middle

Most enterprises have plenty of AI tools. What they're missing is the layer between the tools and the daily work — the part that decides what context the AI sees, what it's allowed to do, what's worth keeping, and how anyone can tell it's working. It helps to see the whole thing as four layers.

Layer 1 · rented
AI tool layer

The rented tools the work draws on — useful, but not the work system itself.

Chat & assistantsCopilotsCoding toolsAgentsModel providers

The customer-owned work coreTwo layers the enterprise owns: the work, and the rules it runs within.

Layers 2 & 3 · owned
Layer 2 · the work
Work execution layer

Where people and agents do the work.

PeopleAI-assisted peopleSkillsWorkflowsAgentsLoops
Layer 3 · the system
Rules, memory, and reviewthe harness

The structure around the work — contracts, governance, security, policy, and memory.

Context contractsSource rulesSecurity & policyPermissionsSkill/agent contractsMemoryReceipts & controls
Layer 3 → Layer 4
Approved connectivity

The rules decide what connects — and what it may touch.

ConnectorsAPIsMCP serversApproved plugins
Layer 4 · the ground truth
Systems, sources & data

The enterprise’s own systems and data — the third-party products it runs and the records they hold.

Systems of recordData lakes & warehousesCommunicationDocs & knowledgeEngineeringService & product
The four-layer model: rented tools above, fixed systems below, and the customer-owned work system in between.

The tools on top are rented and the systems below are fixed. The middle is the part an enterprise owns, and it's where the work is won or lost. Today that middle is a tangle: people stitching tools, context, and systems together by hand. ATOM replaces the tangle with clear rules for context, action, review, memory, and proof. The tools above and the systems below exist to serve the work.

02What ATOM Keeps Separate

ATOM keeps four things separate that tend to get blurred together. When they blur, a method starts to sound like a product, the delivery scaffolding starts to sound like customer software, and tooling gets implied before anyone has agreed there's a real gap.

Where it starts
Customer reality
PeopleSystemsPoliciesWorkSourcesKPIs
The work itself — always present

The framework

the lens

The concepts, boundaries, and maturity model for making sense of enterprise AI work.

ProducesA shared language for work, context, control, evidence, ownership, and measurement.

The engagement method

the method

How an engagement is scoped, baselined, configured, enabled, read, and pointed at what to build next.

ProducesA staged motion that adapts to each customer.

The tooling — only what is justified

Internal delivery tools

team-side

Baseline builders, inventories, contracts, receipts, readiness gates, readouts.

ProducesConsistent, rigorous delivery; they never become customer software.

Customer software

optional · gated

Source registers, context registries, review workflows, enablement and custom agents.

Enters scope only whenthe tools already owned plus the method leave a real gap.

What it builds toward
A customer-owned work system
Approved contextSafe actionReusable memoryEconomics
The four parts kept separate — from enterprise reality to the customer-owned work system.

The framework and the method are always part of the work. The delivery tools keep delivery consistent. The customer software is where it gets interesting, and it earns its place only when the tools already owned and the process leave a real gap, which is most of section 6.

03Start With What's Already There

A modern enterprise AI platform already does a great deal: identity and access, admin controls, connectors, analytics, audit, retention, skill and agent directories, runtime controls. The first job is to use those properly, configured against the enterprise's real work, before building anything new. ATOM uses the stack already in place; it doesn't replace it.

Who owns itWhat they own
The AI stack already ownedAdmin console, identity hooks, connectors, analytics, audit APIs, skills and agents, runtime and retention controls
The customerPolicies, data classification, access decisions, source approval, role and workflow priorities, KPIs, governance cadence, risk tolerance, the definition of success
ATOMDiscovery, configuration design, source/context/skill/action contracts, baseline data, receipts, evidence states, the readout, the operating memory, and the expand/build/stop decisions

Making the environment explicit is the real first job, and it's enterprise configuration design. These are the categories that drive the discovery:

CategoryWhat has to be understood
Identity and accessUsers, groups, departments, contractors, admins, SSO, custom roles, access review
Security, privacy, and complianceData classes, regulated and customer data, retention, audit, legal holds, privacy boundaries
Runtime controlsDevices, networks, repos, terminals, cloud environments, allowed tools and domains, action approvals
Work toolsChat, projects, copilots, coding assistants, docs, collaboration tools, internal apps
Connectors and source systemsDrive, email, chat, CRM, warehouse, BI, tickets, code, calls, support tools, telemetry
Context hierarchyWhat context belongs to the org, a function, a role, a workflow, an account, or a person
Skills, agents, and toolsApproved work patterns, allowed and blocked actions, review rules, internal and external tools
Analytics and auditUsage, adoption, cost, audit logs, compliance exports, reporting cadence
Roles, work, and KPIsJob families, teams, workflows, responsibilities, manager expectations, success metrics
Governance rhythmDecision rights, steering cadence, source approval, promotion decisions, access review, escalation
Economics and successCost model, the model mix the customer owns, time saved, quality, rework, productivity, risk reduction

These are the customer's calls to make. An implementation partner can shape, accelerate, pressure-test, and document the work and put it into operation, but the policies, sources, roles, context, approvals, and definition of success stay with the customer.

04The Engagement

The engagement's shape depends on scope. A focused team can move in months; a large rollout becomes a multi-quarter program with a full-time internal owner, because the work touches AI platforms, security, data, enablement, engineering, operations, finance, legal, and the business. What stays consistent is the method, and it tends to go in three gears.

0The gate

Alignment & scope

Pick the first part of the business, the owners, the tools involved, and the proof point — and what's explicitly out of scope.

OutputOperating charter & first-domain selection
1Crawl

Foundation

Configure the existing tools to that work: inventory tools, sources, roles, context, policy, skills, and agents. Set the baseline.

OutputConfigured environment & measurement baseline
2Walk

Active use

Real users do real work through configured tools, approved context, playbooks, contracts, receipts, and readouts.

OutputAdoption in a reviewed workflow & operating proof
3Run

Expand the system

Decide what expands, what stops, what changes, and what becomes customer-owned tooling or custom-agent work.

OutputExpand / build / stop decisions
Native first. Configure what the stack already does before building anything new.
The customer owns the decisions. Policy, sources, roles, risk, and the definition of success.
The pace follows the evidence. Each phase opens when the work is ready.
Crawl, walk, run — one method, paced by scope and evidence.

Crawl — foundation. Get the first area of the business under review using the tools that are already there. Inventory the tools, work, roles, sources, and context; write the first context and skill/agent contracts; set the security and policy baseline; and take a measurement baseline so there's something to improve against. This is configuration and light records the customer can read and approve: the existing tools, used properly.

Walk — active use. Put real people into the configured system doing real work with configured tools, role and workflow playbooks, approved context, review rules, and a steady enablement rhythm. This is where setup turns into adoption, and where the first real evidence of what's working shows up: receipts, the context and source registries, and the first six-pillar readout.

Run — scale. Where the evidence supports it, go deeper and wider: more teams, more of the work, and the customer-owned software the proof has shown is worth building. This stage is earned by what the earlier work shows.

Two things hold throughout: the customer owns the decisions — policy, sources, roles, risk, and the definition of success — and the pace follows the evidence.

05Seeing What's Working: The Baseline and the Six-Pillar Readout

Every engagement starts with a baseline: an honest read of how an enterprise's AI work looks today. It's produced with tooling (section 6), and it becomes the reference point for what improves. Both the baseline and the ongoing work are read through six pillars: the same six that set the baseline, track improvement, and decide where to invest more and where to pull back.

Cost

Is the value worth the spend — judged against the role and its KPIs, not just seats and tokens?

Context

What context was available, approved, missing, stale, blocked, or overloaded?

Control

What policies, permissions, actions, review rules, and gates shaped the work?

Memory

What became reusable knowledge, what stayed local, and what should be retired?

Performance

Did the work improve — cycle time, quality, decision quality, business outcome?

Portability

Can the work survive a change of model, vendor, tool, team, or workflow?

Six operating pillars: the readout that shows what is working.

Early on this is a service deliverable and a management rhythm — the readout that tells leaders what to configure next, what to enable, what to stop, and where to put the next dollar. Once an enterprise knows what it wants to operate, the same six pillars become a standing dashboard on its own data. That's a piece of software, and it's the next section.

06The Software Behind ATOM

The method has real software behind it, and it comes in two forms.

The proof product is what the delivery team uses to set the baseline. It maps the people, roles, workflows, tools, sources, connectors, policies, and analytics of a real environment; shows the gaps, missing data, and weak or unsafe evidence; and produces the first six-pillar readout. It makes understanding the environment concrete, fast, and repeatable on every engagement.

The installed product is software the enterprise owns and keeps. It's the persistent version of everything the proof finds: the source-state and context registries, the skill and agent contracts, the receipts and gates, retrieval across tools, approved context where people work, and standing six-pillar reporting, all running on the enterprise's own data. Because every enterprise's systems and data are different, this system is adapted to each one, and that is where the meaningful custom development happens in a major engagement.

Architecturally, both are built from the same set of instrumentation, sitting across the tools already owned and the enterprise's systems:

Delivery · sets the baseline

The proof product

Maps the people, roles, workflows, tools, sources, connectors, and policies of a real environment; shows the gaps, missing data, and weak evidence; and produces the first six-pillar readout.

What it givesUnderstanding the environment becomes concrete and fast on every engagement.

proof first, installed follows
Customer-owned · persistent

The installed product

Software the enterprise owns and keeps: source and context registries, skill and agent contracts, receipts and gates, retrieval across tools, and standing six-pillar reporting, on its own data.

What it givesA living work system, adapted to each enterprise, where the custom build happens.

Both built from one set of instrumentationacross the tools already owned and the enterprise’s own systems
Discovery & baselineConfiguration designSource & context contractsEvidence, receipts & gatesEnablementSix-pillar measurementOperating memory & retrievalControl plane
Two products on one instrumentation: the proof product sets the baseline; the installed product is software the enterprise owns.
ComponentWhat it doesIn the proof productIn the installed product
Discovery and baselineMaps the environment and sets the first readBaseline pack across people, work, sources, policy, analyticsA recurring intake and environment map with change history
Configuration designTurns the baseline into configuration for the tools already ownedConfiguration workbook and decisionsDurable configuration records with ownership and approval
Source and context contractsDefines what can be used, reused, promoted, or blockedInventories, contracts, freshness and authority labelsSource-state registry, context registry, promotion ledger
Evidence, receipts, and gatesTracks what was used and what claims are safeReceipts, claim boundaries, review rulesAutomated gates and audit-ready evidence
EnablementTurns configuration into changed behaviorRole playbooks, workflow cards, manager rhythmA permissions-aware enablement assistant in the workflow
MeasurementTurns platform analytics plus business metrics into proofThe six-pillar baselineOngoing six-pillar reporting and economics
Operating memory and retrievalKeeps durable, customer-owned state and serves it where work happensLight, manual where neededPersistent record and retrieval across tools
Control planeOne view of adoption, source health, risk, cost, and decisionsThe executive readoutA standing dashboard on the enterprise's data

What it delivers lands in three places: the enterprise gets lower risk and better decisions about where to expand and what to build; the people get faster, easier, safer, higher-quality work through approved context and in-flow support; and delivery gets a repeatable way to run engagements without reinventing the same work each time.

The software is at different stages of maturity: discovery and baseline are in use now, and the installed product is partly built and grows with each engagement. Maturity matters less here than the substance: the software is real, it's architected, and it's a genuine opportunity for custom development tailored to each major engagement.

07From Proof to Expansion

Custom agents are a real expansion path, but they come later, not first. The first engagement gives an enterprise immediate value: clearer workflows, safer use of context, better enablement, cost visibility, and evidence for management. It also shows where the deeper work pays off: the sources, permissions, integrations, costs, usage, blockers, and business signals that real work depends on. That's what turns "should we build an agent?" from a guess into a decision.

1

First engagement

One real part of the business — owners, a proof point, and a clear boundary.

2

Work system

Context, policy, review, and governance stood up around that work.

3

Operating proof

Receipts, telemetry, cost, outcomes, blockers — what is happening.

The decision point

Qualified expansion map

The evidence, turned into a decision: what is worth expanding, configuring, or building next.

The qualified next work — earned by evidence

Scale the lane

More teams and more of the work, on the same operating core.

Deepen native configuration

Push the enterprise's native AI tools further before building anything new.

Customer-owned software

Source registers, context registries, readouts — where the tools already owned plus process leave a gap.

Custom workflows & agents

Delegated work, now credible because the users, sources, controls, and economics are known.

Proof qualifies the expansion — scale, deepen native configuration, build customer-owned software, or commission custom agents.
Next moveWhen it's the right one
Scale the laneThe approach is working; take it to more teams and more of the work
Deepen native configurationThere's more to get from the tools the enterprise already owns before building anything
Build customer-owned softwareThe tools already owned plus the process leave a real gap worth closing with the installed product
Commission custom workflows and agentsThe users, sources, permissions, economics, and success measures are known well enough to delegate work with confidence

Each of those has to be earned — and an enterprise gets a reason to start before the whole path is obvious.

08Where It's Proven, and Where It's Emerging

I want to be straight about where this is proven and where it's still emerging, because it's the most honest and useful part of this.

Knowledge work is proven, and it's where I've spent my time. I've spent years in this work, and the last couple of years architecting AI around it: context engineering, prompt design, connectors, security, guardrails, and the practical setup that helps a person do their actual job. The approach here is mature and straightforward: build the structure around the user so the system supports the work. I use it, my customers use it, and they grasp it quickly.

Engineering is an honest bet, not a finished model. I'm not a career engineer; I haven't spent decades inside large engineering teams, and I won't pretend the gaps in that experience don't matter. I've built and I understand engineering harnesses in small-team development, so I get the concept: a developer working with coding agents needs the right structure around the team, the product, and the work, the same way a knowledge worker does. I think the opportunity is large, and I've done real work framing it. But for my business this is emerging: the highest-value pieces, including what the custom software for an engineering team should be, will only become clear after seeing the work across a large engineering organization. I'd rather say that plainly than claim a finished model I don't yet have.

The principles travel across both: the same primitives sit underneath, and only the domain contracts change.

Knowledge work

Proven today

The strongest current evidence — where source authority, context, drafting, review, and handoff drive the result.

MeetingsResearchFollow-upSales & GTMDocumentsClient deliveryOperating rhythm

Engineering & coding agents

Emerging

Coding agents act on production code, secrets, and irreversible changes — so it stays specialist-led until sandboxing, test and CI evidence, review, and rollback are proven.

Code reviewPull requestsTest repairMigrationsCI triageRefactorsIncident response
The same primitives run under bothonly the domain contracts change
Work objectSource stateContext contractSkill/agent contractPromotion decisionReceiptDeterministic gateRollupLoop
The honest boundary is the useful part.Deliver where it is proven, and build after proof where it is still emerging.
Same model, different maturity — knowledge work proven, engineering emerging, on shared primitives.
PrimitiveKnowledge workEngineering
Work objectAccount brief, research memo, meeting follow-upSpec, ticket, pull request, test result
Source stateCRM current, transcript available, thread missingRepo clean, dependencies proven, tests passed
Context contractApproved account context, allowed customer dataApproved spec sources, codebase boundaries
Skill/agent contractMeeting prep, call closeout, account researchCode review, migration plan, test repair
ReceiptContext used, output created, reviewedEvidence bundle, test result, PR checks
GateMissing source, sensitive data, approval neededLint, test, type, security, spec mismatch

09What a Practice Can Standardize

A practice can standardize how it works; the customer's answer stays their own.

What can be standardized: the intake for a first engagement, the baseline dataset, the contract structure for work, context, action, review, and evidence, the existing-tools-first approach, the enablement rhythm, the receipt and proof model, the six-pillar readout, the expand/build/stop decision, the delivery tools that keep it consistent, and the language for what's proven versus what's emerging.

What stays specific to each customer: the work that matters first, the approved tools, the source hierarchy, the risk boundary, the proof their buyer needs, the governance cadence, the appetite for owning software, and the path into custom workflows or agents.

That's what keeps the work repeatable and still theirs.

10Closing

ATOM is a way to implement enterprise AI tooling. It starts with the environment an enterprise already has, configures the tools against real work, makes context and action reviewable, reads the work through the six pillars, and uses that evidence to decide what to expand and what to build.

The aim is to help an enterprise make its AI something the business controls and its people use on the work that matters, then build the software that makes that last.