The Ride in One Paragraph

You are the owner of a 25–100 employee company, and someone has already asked you what your AI policy is. Maybe a customer, maybe a carrier, maybe a board member, maybe your kid. You did not have a clean answer, so you started reading. Every AI governance article, e-book, and $75,000 assessment you found was written to sell you the next thing. This Car is different. This Car is a doctrine — an owner's frame for making four decisions on one page in fifteen minutes — and it will not sell you anything. Same rail, same fare, no gate.

The Four Decisions

Every serious AI governance question in the market compresses into four sentences an owner can sign on one page:

1. Who is allowed to use AI on behalf of my company?
2. What data is my company's AI allowed to touch?
3. What receipt does every AI action leave behind?
4. Who reviews AI output before it leaves the building?

That is the doctrine. Four decisions. One page. Your signature. Fifteen minutes of review a month. Everything else on this Car is context around those four decisions — why they are the right four, what happens when you skip them, and what the market sells you instead.

The Market Truth

The AI governance market is not confused. It is organized around confusion. Vendors, carriers, and consultants all profit from your not knowing what to sign. Every $9,000 Trust Center, every $6,000-a-month vCISO retainer, every $75,000 AI Readiness Assessment, every carrier surcharge questionnaire — all of them survive on the same premise: the owner does not know what four decisions to make, so they will pay someone else to pretend to make them.

You are the owner. Only you can make the four decisions. This Car is designed to give you the frame in plain English so you can make them on your own paper and stop paying to have someone else pretend to make them.

The Problem

Group AI governance today looks like a company fax machine in 2010. Everyone knows it is broken. Nobody wants to be the person who says so out loud. Three groups profit directly from the confusion staying in place:

• Vendors who sell governance as a subscription and charge more when you look like you might leave.
• Carriers who add AI surcharges to your renewal and price the ambiguity, not the risk.
• Consultants who invoice for the assessment, the retainer, the training, and the board packet as four separate line items.

None of them will tell you the four decisions are simple. Simplicity ruins their bundle.

The Buyer

This Car is written for the owner-operator of a 25–100 employee company. Not the enterprise CIO. Not the compliance officer at a Fortune 500. The owner who signs the payroll runs, reads the D&O insurance questionnaire on a Sunday, and gets asked by customers what the AI policy is without warning.

You have six specific Monday moments where AI governance actually shows up in your business:

1. A customer asks whether their data ever touches AI in your workflow.
2. A carrier questionnaire arrives with an AI section.
3. An employee starts using a new AI tool without asking.
4. A board member asks what your AI policy is.
5. A vendor pitches you an AI product with data-handling terms you cannot decode.
6. Your own team ships something an AI drafted, and no one can remember who reviewed it.

The four decisions are designed to give you a clean answer to all six moments in fifteen minutes a month.

What the Absence Costs

You do not need dollar figures to see the cost. If you cannot answer the four decisions on one page today, you are already paying for the absence in four categories every month:

• Shadow-seat waste — team members using AI tools your company is paying for twice, or using tools your company is not paying for at all and cannot see.
• Rework — AI-drafted work shipped, broken, then fixed by a human at billable rates because no receipt existed to catch it earlier.
• Insurance and carrier friction — surcharges, questionnaires, and renewal delays priced against the ambiguity of your AI posture, not the actual risk.
• Diligence deduction — a future acquirer, lender, or partner discounts your enterprise value because you cannot produce twelve months of AI receipts on demand.

The absence is not free. It is priced into every one of those four categories every month you do not sign.

The Decision You Are Making

The doctrine compresses to a single sentence you sign on one page:

I am the person who decides how AI is used inside this company, and I am willing to name the four decisions on a single page, sign it, and review it for fifteen minutes once a month.

That sentence is the doctrine. Not "I will hire a consultant." Not "I will buy a Trust Center." Not "I will let my carrier's questionnaire define our AI posture." I decide. I sign. I review. Fifteen minutes a month.

The four sub-decisions are:

1. Who uses AI — named roles, named exceptions.
2. What data — named data classes, named prohibitions.
3. What receipt — named format, named retention.
4. Who reviews — named human, named cadence.

Where the Ride Leads

This Car is doctrine, not execution. When you have signed your four decisions and want help operating them, the rail bridges to the Dynasty stadium at $28 per ride, comped through Sunday after Thanksgiving 2026. The stadium is where doctrine becomes execution. Rooms have names, and each room hosts a master class inside it:

Doctrine is what you can do in fifteen minutes a month on your own paper. Execution is what happens when you want tooling, board reporting, training, incident response, or a peer group of owners doing the same discipline. Doctrine ships free on the rail. Execution lives in the rooms. Same rail carries you either way.

The Red Lines

Ten commitments this Car makes against its own short-term revenue, so the doctrine stays a doctrine and never drifts:

1. Never fear as the primary motivator. Education, not panic.
2. Never recommend a specific vendor, platform, or product.
3. Never gate the receipts card behind a form.
4. Never claim regulatory authority this Car does not have. Statute reads defer to the Federal Train and to David M. Williams's GRC practice.
5. Never make a numeric claim without a source layer.
6. Never sell a Dynasty room during the ride. The bridge is a doorway, not a checkout page.
7. Never speak in a voice that is not owner-to-owner.
8. Never impersonate or falsely name an endorsement.
9. Never treat the reader as a compliance liability. The reader is the decision-maker.
10. Never let the doctrine drift with the vendor market. The four decisions stay pinned.

Where This Car Stops

Ten boundaries this Car names openly. Each one hands off to a specific Dynasty asset. A doctrine without stated boundaries drifts into every adjacent territory and loses its shape.

• Not legal advice → Federal Train Compliance Command Center & David M. Williams's GRC practice.
• Not tooling → Room 202 diagnoses. Room 303 builds.
• Not incident response → Room 808. If you are reading this at 2:47 AM because something broke, close this and open the Command Center.
• Not board reporting → Room 606 & Room 707.
• Not training → Room 303 & the Meridian Library.
• Not enforcement — this Car is a document, not a police force.
• Not certification → SOC 2, ISO 27001, HITRUST & David's GRC practice.
• Not benefits → the Meridian benefits cars & the SB 2610 / ACA seven-car system.
• Not the reader's decision — this Car ends with a blank one-pager and a pen.
• Not a subscription — this Car does not renew.

Where This Car Leads

This Car is a seed doctrine. It authors the reader for five companion pieces on this rail, the two adjacent rails, and three downstream assets. Every hand-off is published openly with no gate.

Sequel Cars on Meridian

• The Receipts Card. The blank one-page card the reader takes to their team.
• The Fifteen-Minute Review. The agenda for the monthly review this Car promises.
• The Correction Log Template. The discipline for updating your doctrine.
• The Vendor Refusal Kit. The four questions you make the seller answer before buying.
• The Owner's Signature Block. A dozen anonymized signed one-pagers from real owners.

Adjacent rails

• The Federal Train. Statute-by-statute compliance reads.
• The Meridian Benefits Cars. SB 2610 / ACA seven-car system for group health plan questions.

Downstream assets

• The Dynasty stadium. Rooms for execution.
• David M. Williams's GRC practice. Audit and attestation.
• The Dynasty Library. Audiobook, workbook, cinematic short, print.

The Blank One-Pager

You just did in fifteen minutes what a $75,000 assessment sells in six weeks. Same rail carries you into the stadium when you want execution. Doctrine ships at the $28 rail fare.

The Correction Log

This Car will be wrong sometimes. When it is, corrections appear here with a date, an owner's signature, and a plain-English note about what changed and why. No stealth edits. No overwriting. The version history is public and signed.