1. Establish the baseline
Start with Visibility. Connect official sources and deploy the collection paths needed to identify tools, accounts, people, models, activity, and spend. Do not begin with enforcement. First determine source coverage, freshness, identity quality, and which apparent gaps are collection gaps.2. Assign decision owners
Define who owns:- tool review and access;
- subscription and seat decisions;
- model and provider policy;
- employee AI-workspace standards;
- privacy, retention, and incident review; and
- endpoint and integration operations.
3. Choose company defaults
Decide which tools and workflows the company will fund, what should be standardized, and where exceptions are acceptable. Use Sidekick as the company-controlled place for shared AI work when the goal is to move beyond isolated personal conversations.4. Control model selection
Use Relay to establish a traffic baseline, compare routing decisions, evaluate candidate models, and move appropriate traffic to automatic routing. Keep fallback, budget, and provider ownership explicit.5. Run the review loop
1
Observe
Review adoption, activity, spend, tool posture, Sidekick work, and Relay
traffic on a regular cadence.
2
Investigate
Move from aggregates to source, identity, workflow, and cost evidence.
3
Decide
Record the tool, access, routing, funding, or standardization decision in
the surface that owns it.
4
Act
Carry out external provisioning, procurement, provider, identity, or
endpoint changes in the system that owns them.
5
Measure
Confirm that adoption, spend, quality, latency, and risk changed as
intended.