Enterprise
Organisations, business units, regions, environments, compliance domains and ownership.
The AI Twin is a continuously derived model of every governed AI system, agent, model, tool, dependency, policy, trust relationship, risk and runtime state.
It is generated from operational evidence—not maintained as a separate inventory—so leaders can work from a current model of the enterprise rather than a diagram of what the enterprise used to be.
AI estates change faster than manual governance processes can document them. A spreadsheet may list approved systems. It rarely shows the agents now running, the tools they can reach, the policies currently in force or what changed since the last review.
Static documentation records intent. Governance needs operational reality.
Architecture diagrams, registers and control spreadsheets remain useful records. They fail when treated as the live model of a changing autonomous estate. The AI Twin closes that gap by deriving current state from the governed system itself.
A conventional inventory is another copy of the truth. Every copy needs an owner, a review cycle and reconciliation. The AI Twin is assembled from the evidence and governed records the operating platform already produces.
Approved provisioning records, governance decisions, runtime events and monitoring evidence.
Systems, agents, models, tools, identities and environments resolve into a common schema.
Dependencies, permissions, trust boundaries, policy scope and reachability become graph relationships.
The current enterprise model is assembled from evidence rather than copied into a separate inventory.
The live model is evaluated against the governed baseline to identify meaningful change.
Executive Workspaces present the same model through role-specific operational views.
The result is better operational awareness, stronger evidence and faster governance decisions—not because documentation disappears, but because it is no longer asked to behave like a runtime system.
The Twin connects what the enterprise owns, what each autonomous system can reach, who may authorise it, which policies apply and where operational risk can propagate.
Organisations, business units, regions, environments, compliance domains and ownership.
AI systems, models, tools, MCP servers, APIs, data services and protected resources.
Deployed agents, specialist roles, autonomy levels, assigned capabilities and operating context.
The systems, tools, services and workflows each component relies on or can affect.
Identity providers, operators, approvers, boundaries and delegated authority.
Applicable controls, approval requirements, protected actions and evidence obligations.
Open incidents, risk zones, privileged capability, policy gaps and exposed critical assets.
Which assets and outcomes are reachable from an agent’s current permissions and tool access.
Current governance state, active environments, recent decisions and observed change.
Visibility follows the path of possible action, not just the inventory of components.
The Twin is not an executive illustration detached from the control plane. Its state is derived from provisioning, governance, approval, execution and monitoring records produced throughout the operating lifecycle.
The AI Twin is read-only by default. Any write capability or source-system mutation remains a separate governed integration surface requiring explicit policy, authority, testing and evidence.
Drift is operationally important because a small change in policy, permission, tool access, autonomy or trust can alter what an autonomous system can reach. Current monitoring surfaces the governed divergences below; additional estate signals are scoped to the connected evidence sources.
A system appears outside the approved estate or expected provisioning path.
A server is added outside the governed baseline.
A new capability changes what an agent or AI system can reach.
An existing tool is elevated to privileged capability.
A protected asset, critical-system control, risk zone or governance department is removed.
A policy required by the governed baseline is no longer active.
The operating autonomy level rises above the approved baseline.
A new system operates in an environment outside its declared trust boundary.
Detection does not silently rewrite production. The platform identifies the change, relates it to the governed baseline and routes the evidence to the appropriate operational authority.
Each stakeholder sees a scoped projection of the same enterprise model. Security, architecture, compliance and operations no longer begin from separate inventories.
See where AI is operating, who owns it and which decisions or risks require executive attention.
Understand systems, agents, models, dependencies, environments and the impact of change.
Identify privileged capability, trust-boundary exposure, permission drift and reachable assets.
Connect obligations, policies, decisions, approvals and retained evidence to the current estate.
Track active systems, monitoring state, open drift and operational intervention queues.
See tool access, integration paths, upstream dependencies and likely blast radius before change.
Continuously derives the enterprise, its relationships and current state.
Evaluates proposed behaviour against policy, authority and reachability.
Coordinates provisioning, governance, evidence, monitoring and executive operations.
Contribute domain policies, mappings, evidence requirements and workflows.
Present the same governed state through role-specific decisions and briefings.
The AI Twin is generated as part of Guardian OS enterprise provisioning and remains the shared model used by governance, monitoring and Executive Workspaces. See the complete Guardian OS operating model →
Replace periodic reconstruction with a continuously derived model built into the operating platform.