Charter
What a Charter is
Not a project plan. Not a requirements document that executes once and collects dust. A Charter is the memory that survives the chaos. Its value is the decision log: when someone asks a year later why the deployment started in operations instead of the louder pain in the queue, or why the company kept its work management platform instead of replatforming onto its own product, the answer is here, with the alternatives that were weighed and the evidence that settled it. The Architect keeps it current, same-day.
Metadata
| Field |
Value |
| Project |
Run the company on its own platform, and turn the operating knowledge into the customer training program |
| Client |
The SaaS AI platform company (anonymized) |
| Charter Keeper |
The Architect |
| Dates |
Held in the private engagement record; relative markers used here |
| Current canon |
Refine. Operations and customer success run on the platform; the training program is live with customers; the wider system leadership envisioned continues to build |
| Version |
Running state |
Positions
The work was held together by clear accountabilities, not an org chart.
| Position |
Who held it |
Tension owned |
| Sponsor |
The CEO |
Authority. Owned the why, named the gap, cleared the way |
| Guide |
First Strategy senior practitioner |
Translation. Carried the method and kept the Charter honest |
| Architect |
First Strategy |
Curiosity and stewardship. System design and Charter Keeper |
| Sage |
The head of customer success and the senior support lead |
Context. What the queue actually contains and what resolves it |
| Scout |
[A few] customers in the training pilot |
Empathy. Validated whether the curriculum actually changes how a customer operates |
| Builder |
The client's platform engineers, with First Strategy |
Execution. The agents, the knowledge layer, the digests, built on the company's own product |
| Operations gate |
The head of operations |
Safety. Approved every internal automation and chose when an old motion retired |
| Customer gate |
The head of customer success |
Integrity. Approved every customer-facing word before it shipped |
On a small team one person holds several Positions. As the system proved reliable, a Position could be augmented by an AI agent inside documented constraints, with the human shifting from doing to directing and reviewing.
Objectives and constraints
The build specification: what the project set out to do and the lines it would not cross.
Scope
In scope: the company's internal operation, the services PMO, the support queue, the glue between the work management platform and the office suite, and the training program built from the deployment. The agents run on the company's own platform; the build is also product evidence. Out of scope: the product's roadmap, the customer-facing platform itself, and the sales and partner motions until their moves earn their turn.
Objective and success criteria
Run the company on its own platform, recover the glue hours, and turn the operating knowledge into the education customers never had.
| Measure |
Baseline |
Target |
Result |
| The company on its own product |
Absent from its own operation |
Operations and customer success running on the platform daily |
Live. The company runs on its own product every day |
| Glue hours |
[Several] full-time equivalents across four teams |
Recovered to judgment work; growth absorbed without matching hires |
Recovered in operations and the queue; stated directionally pending cleared figures |
| Queue re-answering |
[Roughly half] the volume, [most of two] FTEs |
Known questions drafted by machine under a human gate |
Live; the known half drafts by machine, catch rate published internally |
| Status production |
[The better part of a day each week] per project manager |
Status read, not produced |
Digests live; the hand-built weekly report retired |
| Customer ramp |
Steady state in [a few months], self-taught |
Trained customers, faster ramps |
The training program is live; customers ramp faster |
Constraints
- Every customer-facing word passes a human gate while trust is earned, and graduates only on catch rate. The company holds itself to the standard it asks of its customers.
- Keep the systems, remove the logging-in. No internal replatforming; the agents work across what already runs.
- No old motion retires until its replacement proves out. Half-adoption is the named failure mode.
- The internal deployment runs like a customer engagement: an owner, a baseline, success criteria, a cadence.
- Headcount absorbs growth only where judgment requires it, never to patch glue.
Architecture and human-in-the-loop design
The company's own platform sits at the top, running the agents. Below it, three working layers. The digest layer reads the boards, the threads, and the calendars, and produces the operational truth people used to assemble by hand. The knowledge layer holds what the queue knows: the documentation and the closed-ticket record, codified from the heads and the side spreadsheets that held it, versioned against the product so an answer cannot ship for the wrong release. The glue layer moves information between the work management platform and the office suite so people stop retyping it.
Above all of it, two human gates. The operations gate approves internal automations and decides when an old motion retires. The customer gate reads every customer-facing word against the knowledge layer before it ships. Every catch is logged with its pattern; the knowledge layer learns from the log; graduation to lighter review happens on catch-rate evidence, never by decree.
Current state at the start
Carried from the Day One Audit. A company of about 120 people shipping an AI platform and running itself on hand-glue: [roughly half] the queue answered from memory and one lead's personal spreadsheet, project status assembled by hand [the better part of a day each week] per project manager, standing meetings that read boards aloud, leads cooling [days] in the marketing-to-sales seam, partners managed from attention left over. Customers learning the product alone from a webinar recording, and the ramp paying for it. The technology sufficient and owned. The deployment nobody's job.
Decision log
The decisions that shaped the build, each with the alternatives weighed and the evidence that settled it. This is the part of the Charter that answers "why did we do it this way."
| When |
Decision |
Alternatives rejected |
Rationale |
Evidence |
| Interrogate, wk 1 |
Run the company on its own platform before telling the story anywhere |
A marketing-led "we run on our product" narrative first |
Credibility runs both directions; a told story without a run floor is the worst outcome in the market |
The audit's credibility-risk read; leadership concurrence |
| Interrogate, wk 1 |
Start in operations, not in the queue |
Start with support, the loudest pain |
The queue touches customers; trust is earned on a private blast radius first, and the PMO held the densest recoverable hours |
The friction counts; the gate design not yet proven |
| Interrogate, wk 2 |
Keep the work management platform and the office suite; automate across them |
Replatform the internal operation onto the company's own product |
The friction was the glue between systems, not the systems; replatforming spends months for no customer value |
The Day One trace; the floor's own counts |
| Interrogate, wk 2 |
Baseline from exports before building |
Build first, measure impressions later |
Without the before, every result is an anecdote |
Queue exports, board history, calendars |
| Interrogate, wk 3 |
Seed the knowledge layer from the closed-ticket record and the answer library |
Author a knowledge base by hand |
The knowledge already existed and was unreachable; authoring fresh discards years of answered questions |
The support lead's spreadsheet; the repeat-share tag |
| Solve, wk 1 |
Digests read-only until trusted, then write actions |
Full automation from day one |
Trust is earned by parity with the hand-built reports, then by catches |
The digest-versus-report comparison |
| Solve, wk 3 |
Retire the first standing sync on evidence, by decision |
Let meetings fade by attrition |
Half-adoption is the failure mode; the old motion ends when the new one provably carries it |
The operations gate's call, logged |
| Expand, wk 1 |
Version the knowledge layer against the product before customer-facing drafting scales |
Ship drafts from the unversioned corpus |
The gate caught confident drafts answering for the wrong release |
The catch log's first pattern |
| Expand, wk 2 |
Every customer-facing word through the customer gate; graduation by catch rate |
Auto-send the known answers |
The standard the company asks of its customers, applied to itself |
The gate's catch rate, read weekly |
| Refine |
Turn the deployment's playbooks into the customer curriculum |
Keep training as billable services hours; more documentation |
The trace broke at self-teaching; documentation was already losing; operating knowledge was the scarce thing |
The ramp evidence; the pilot cohort's read |
| Refine |
Teach customers to operate, not just to use |
A feature-tour curriculum |
Customers fail at governance and method, not at buttons; the company now had a proven method to teach |
The pilot feedback; the queue's question mix |
The decision and experiment record
The supporting narrative behind the log. The project ran the full WISER method. Witness was Day One; the project picked up at Interrogate and ran through Refine.
Interrogate
The first weeks were spent making the audit's counts hard and the instincts testable. A week of tickets was tagged by hand: the repeat share held at [roughly half], and the top recurring questions were fewer and more concentrated than anyone expected, which made the knowledge layer's first cut smaller than feared. The drafting test ran offline: agents drafted answers to the recognized questions from the documentation and the closed-ticket record, and the senior support lead judged them against what she would have written. The drafts were good, and one pattern in the misses mattered more than the hits: the machine would answer confidently from material that belonged to an older release. That catch, before a single customer saw a draft, set the versioning rule the knowledge layer was built on.
The digest test ran read-only on [two] live project boards. The comparison was the project manager's own Friday report, and the first digests lost: they could see the boards but not the decisions living in mail threads. Wiring the office suite into the read fixed it, and the fixed digests matched the hand-built reports closely enough that the project manager said the quiet part out loud: most of my Friday is producing this.
Solve
The first working system went live in the services PMO. Digests, daily, assembled from the boards, the threads, and the calendars, read by the people who used to write them. Board hygiene and handoff agents followed, moving information between the systems without a person retyping it. For weeks the old motion ran alongside the new one on purpose, the hand-built report beside the digest, until the parity was boring. Then the operations gate retired the Friday report and the first standing sync, by decision, logged. The hours came back exactly where the audit said they were.
Expand
The proven pattern moved to the queue, where the stakes change: the words face customers. The knowledge layer went live drafting answers to recognized questions, every word read by the customer gate before it shipped. The senior support lead's spreadsheet, the library she had built by hand for years, was codified into the layer and versioned against the product, and she moved from writing the answers to judging them. The catch log did its job: each miss became a pattern, each pattern a rule, and the catch rate fell week over week. The known half of the queue now drafts by machine; the hard half gets the senior hours the easy half used to consume.
Refine
Live and governed are different states, and the difference is the cadence. Oversight tiers were set by risk, graduation thresholds written down, and the weekly read established: the counts against the baselines, the catch rates by content type, the drift checks on the layers underneath.
Then the engagement turned the deployment inside out. Everything the internal build had produced, the playbooks, the gate designs, the graduation rules, the catches and their fixes, was authored into a training program that teaches customers to operate AI inside their own businesses, the way the company now operates it inside its own. It was piloted with [a few] customers, revised on their feedback, and made standard for new customers. The curriculum's authority is its provenance: it teaches what the company does, demonstrably, on its own floor.
Hierarchy of Agency
Three tiers of human oversight on what the machine produces, by risk. The gates own the tiers; the tier governs how much of the gate's attention each output type gets.
| Tier |
Oversight |
Applies to |
| 1: Light review |
Spot checks on a cadence; the output ships without a per-item gate |
Internal digests and board hygiene after parity proved; recognized-answer drafts whose catch rate stayed near zero across a full cycle |
| 2: Full review |
Every item read before it ships |
Customer-facing drafts on newer question types; status that leaves the building; changes to the knowledge layer |
| 3: Human-led |
The machine assists; a person authors and decides |
The hard tickets, escalations, anything touching pricing, contracts, renewals, or a partner commitment |
An output type moves to a lighter tier only on evidence: a full review cycle in which the gate's catch rate on that type stays near zero. Recognized-answer drafts earned Tier 1 that way. Escalations never will, by design. If a tier drifts, it falls back to heavier review. A human is accountable for every customer-facing word, at every tier.
Risk register
| Risk |
Mitigation |
Status |
| The credibility story runs backwards: an internal deployment that quietly fails |
Run like a customer engagement: owner, baseline, success criteria, weekly read |
Held; the deployment is the demo now |
| Half-adoption: agents live while the old meetings and reports continue |
No motion retires until its replacement proves; retirement is a logged decision |
Held; the Friday report and the first sync are gone, on evidence |
| The machine answers from the wrong product version |
The knowledge layer versioned against releases; version checks in the gate's read |
Realized once, offline, in Interrogate; the versioning rule exists because of it |
| Queue knowledge concentrated in a few heads and a spreadsheet |
Codified into the governed knowledge layer; the owner became its judge and teacher |
Resolved; the spreadsheet retired into the layer |
| Customer-facing drafts erode trust |
Every word gated while trust is earned; graduation by catch rate only |
Active control; catch rate falling by type |
| The digests go quietly stale as boards change shape |
Schema checks, a trigger list, and the weekly drift read |
Realized once, post-launch; caught and fixed; see the drift record |
| The curriculum drifts from what the floor actually does |
The program teaches the live deployment; revised on the same cadence the deployment evolves |
Active control; pilot feedback wired in |
Drift and incident record
The system's one post-launch incident earns its place in the record because of how quietly it arrived. A team restructured its boards, renamed columns, split a group, ordinary housekeeping, and the digest that read those boards kept producing, confidently, from the stale mapping. Nothing errored. The numbers just stopped moving. The operations gate caught it on the weekly read: a project everyone knew was sprinting showed a digest that had not changed in days.
The response:
| Action |
Detail |
| Contain |
The affected digests flagged and read manually while the mapping was rebuilt |
| Fix |
Schema checks added: a digest that reads a changed board structure stops and says so instead of producing from the stale map |
| Generalize |
A trigger list written: the conditions that force an agent to halt and ask, board restructures and release changes first among them |
| Teach |
The incident, its catch, and its fix went into the training program, because customers' boards get restructured too |
The lesson logged: an agent that stops is annoying, and an agent that confidently produces from a stale picture is dangerous. Build them to stop. Watch the aggregates for the numbers that stop moving, because silence is a signal.
Evolution history
How the oversight posture changed over time, and why.
| When |
Change |
Trigger |
| Solve |
Digests read-only, every output compared to the hand-built report |
Trust not yet earned |
| Solve, late |
The Friday report and the first standing sync retired |
Parity proved and boring; the gate's logged decision |
| Expand |
Customer-facing drafts at full review, every word gated |
New stakes; no track record on customer-facing words |
| Expand, late |
Recognized-answer drafts graduated to light review |
A full cycle with the catch rate near zero on the type |
| Refine |
Schema checks and the trigger list on every reading agent |
The stale-digest incident |
| Refine |
The deployment's playbooks authored into the customer curriculum, revised on pilot feedback |
The training pilot's read: customers fail at method, not buttons |
Current status and what transfers
The company runs on its own product every day. Operations runs on digests people read instead of reports people write; the known half of the queue drafts by machine under a gate whose catch rate is published internally; the glue between the work management platform and the office suite is carried by agents, and the need to live logged into those systems all day is gone. The training program is live: built from the company's own deployment, piloted with [a few] customers, standard for new ones. Customers ramp faster because the company has actually walked the floor it sells.
The judgment seats are the client's and always were. The gates are theirs, the knowledge layer is theirs, the curriculum is theirs, and the decision log is theirs. The work continues toward the full system leadership envisioned, with the same discipline this Charter records.
Outcomes
- The company runs on its own platform, daily, in operations and customer success. The deployment is the demo.
- The glue hours recovered: status read instead of produced, known answers drafted by machine, information moving between systems without retyping. Stated directionally pending cleared figures.
- The hand-built Friday report and the first standing syncs retired on evidence, not attrition.
- The queue's known half drafts by machine under a human gate; senior support hours moved to the tickets that need judgment.
- The knowledge that lived in heads and a personal spreadsheet now lives in a governed, versioned knowledge layer.
- The training program live with customers: an operator's education built from the company's own floor. Customers ramp faster.
- Growth absorbed by recovered capacity rather than matching headcount, which was the constraint that brought us in.
Plays
The WISER plays this engagement ran, instantiated with the client's specifics. This is the index and what each produced. The high-value plays are held as standalone documents; the rest were applied inline in this Charter. | Canon | Play | What it produced | Source |
|-------|------|------------------|--------|
| Witness | Friction Mapping | The internal friction map, counted from the queue, the boards, and the calendars | Standalone play |
| Witness | User Flow Mapping | The signed-contract-to-steady-state trace and its broken education step | Inline in the Day One Audit |
| Witness | Documenting Current State | The what-runs-the-work read, workarounds included | Inline in the Day One Audit |
| Interrogate | Assumption Auditing | The register of beliefs tested: hiring, replatforming, the queue as weather | Standalone play |
| Interrogate | Experiment Selection, Logging | The ticket tag, the offline drafting test, the read-only digest trial | Standalone play |
| Solve | Human-in-the-Loop Design | The two-gate system and the catch log | Standalone play |
| Solve | Quality Objective Setting, Value Validation | The baselines and the parity standard for retiring old motions | Inline above |
| Expand | Expansion Sequencing, Context Fit | Operations to queue to curriculum, each context earning the next | Inline above |
| Refine | Drift Monitoring, Incident Response | The stale-digest catch, the schema checks, the trigger list | Standalone play |
| Refine | Hierarchy of Agency Design, Graduation | The tiers and the catch-rate thresholds that move a type between them | Inline above |
The deployment is built, and it was never only a deployment. The company that could not find time to onboard itself now teaches its customers from the experience of having done it. The next moves are named in the playbook, the revenue seam and the partner motion, and the machine that earns them is already running.