Experienced leaders · About 55 hours · 3 projects · Free · Updated Nov 4, 2026
AI Roadmap for Tech leaders
In about 55 hours you hold an architecture decision record, a model and vendor scorecard with real prices, and an evaluation and rollout plan with guardrails, all for one real AI feature in your company.
0of 55 hours · 0%
Saved in this browser. No account, no email.
What you'll build
Go at your own pace. Stop at any milestone: each one leaves you with something to show.
- 1Architecture decision record for one AI featurehour 17
Decide how one AI feature should be built, and write down why and what would change the decision.
- 2Model and vendor selection scorecard with real priceshour 33
Compare models and vendors for one feature on real prices and your own test cases, then recommend one with an exit plan.
- 3Evaluation and rollout plan with its guardrailshour 55
Write the plan that takes the feature from a working prototype to production and keeps it there.
Skills you'll learn
- Architecture decisions
- Retrieval vs fine-tuning
- Context budgets
- Output contracts
- Permissions
- Autonomy levels
- Cost modeling
- Caching
- Open vs closed models
- Gateways
- Vendor evaluation
- Exit planning
- Golden sets
- Rubrics
- Threat modeling
- Guardrails
- Red teaming
- Rollout
- Drift monitoring
- Governance
Prerequisites
- You have led an engineering team or owned a system's architecture.
- You can read a pricing page and a short technical paper.
- You have one real AI feature, planned or live, to use as your running example.
- No code or math is needed.
Program outline
3 milestones · 10 sections · 50 lessons · 3 projects · Every course and source is free
Milestone 1 · Hours 1 to 17 · 3 sections · 15 lessons
Architecture: what you are buying and how it fits
Learn what a language model is and how the four ways of giving it your data compare.
Hours 1 to 60/15
By the end you can explain to your board in plain words what a language model does and does not do, show where each dollar in the AI stack goes, and name the one feature your architecture decision record will cover.
In the Encyclopedia: Large Language Models (LLMs), The AI Stack, AI Strategy
What a language model actually does, and does not70 min
- WatchLarge Language Models explained briefly · 3Blue1Brown
- ReadA basic misunderstanding of what an LLM does · Benedict Evans
- DoWrite a 150-word paragraph for a board member: what the model does with a prompt, why it can be confidently wrong, and the one job it is reliably good at in your business.
The Karpathy hour: how these models are built, tuned and served75 min
- WatchAndrej Karpathy · Intro to Large Language Models (1hr) · Andrej Karpathy
- DoWrite a ten-line glossary in your own words (pretraining, fine-tuning, RLHF, inference, tokens, context window, hallucination, tool use, open weights, scaling) and send it to your leadership team as the shared vocabulary.
The AI stack: layers, lock-in and where the money goes65 min
- WatchWhat Is an AI Stack? LLMs, RAG, & AI Hardware · IBM Technology
- Read
- DoDraw your company's current and target AI stack as a five-row table (silicon and cloud, data, models, orchestration and tooling, applications): who you pay today, who you would pay, and whether you own the layer. Mark where lock-in lives.
Where the opportunities are, and why most pilots stall65 min
- WatchAndrew Ng: Opportunities in AI - 2023 · Stanford Online
- Read
- DoList your company's AI pilots from the last 18 months in a table: owner, status, the number it was judged on, and why it stalled or shipped. Write one sentence on the pattern you see.
Pick the feature and write its decision frame75 min
- CourseTransform your business with AI · Microsoft Learn
- ReadMaking AI Work: Leadership, Lab, and Crowd · Ethan Mollick
- DoDo the 'Create business value with AI' module of the Microsoft path. Then choose the one AI feature your architecture decision record will cover and write its decision frame in five lines: the user, the job to be done, what good looks like as a number, what it must never do, and the date a decision is due. Have one peer check it.
Hours 7 to 110/17
By the end you can name the four ways to put your data in front of a model (prompt, retrieval, fine-tuning, tools), pick one for your feature and defend the choice with its cost driver and its risk in a paragraph.
In the Encyclopedia: Context Engineering, Retrieval-Augmented Generation (RAG), Fine-Tuning LLMs
Context engineering: what goes in the window and what it costs65 min
- ReadEffective context engineering for AI agents · Anthropic
- WatchWhat Is Context Engineering? Why It Matters for AI Agents · IBM Technology
- DoWrite the context budget for your feature as a table: system instructions, tool definitions, retrieved documents, conversation history, with an estimated token count for each and a mark on the parts that stay identical across calls (your caching candidates for the cost model).
RAG, explained for the person who signs off on it70 min
- WatchRAG Explained in 5 Minutes · IBM · IBM Technology
- ReadA Practitioner's Guide to Retrieval Augmented Generation · Cameron R. Wolfe
- WatchWhy Enterprise RAG Keeps Failing (It's Not the Data) · codebasics
- DoDraw the retrieval pipeline for your feature as a table of stages (ingest, chunk, embed, store, retrieve, rerank, generate, cite) with the failure you expect at each stage and who owns the data there.
Retrieval that works: contextual retrieval, hybrid search and agentic loops65 min
- ReadContextual retrieval in AI systems · Anthropic
- WatchWhat is Agentic RAG? · IBM Technology
- DoDecide whether your feature needs plain retrieval, hybrid search with reranking, or an agentic retrieval loop. Write the decision in three sentences with the one measurement (retrieval hit rate on 20 real questions) that would prove you wrong.
Fine-tuning: when it earns its keep70 min
- WatchIs Fine-Tuning Still Needed? LLMs, RAG, & LoRA · IBM Technology
- Read
- ReadWhen to Fine-Tune LLMs (and When Not To) - A Practical Guide · r/LocalLLaMA
- DoFill a four-row comparison for your feature (prompt only, retrieval, fine-tuning, retrieval plus fine-tuning) with columns for data needed, time to first version, recurring cost driver, what breaks when the data changes, and privacy exposure. Circle the row you would fund.
Structured outputs: the contract between the model and your software60 min
- ReadStructured outputs · Anthropic
- ReadStructured model outputs · OpenAI
- DoWrite the output contract for your feature: the fields the model must return, which are required, what a malformed answer triggers, and the fallback the user sees. Add it as the interfaces section of your architecture decision record.
Hours 12 to 170/15
By the end you can tell a workflow from an agent, set the autonomy level and the permissions for your feature, and finish the architecture decision record.
In the Encyclopedia: AI Agents, Model Context Protocol (MCP), Agentic Coding
Agentic design patterns: Andrew Ng's course, first lessons65 min
- CourseAgentic AI, Andrew Ng (free, certificate extra) · DeepLearning.AI · free, certificate extra
- DoWatch the first module. Then write one paragraph on which of the four patterns (reflection, tool use, planning, multi-agent collaboration) your feature needs, and which it does not.
Workflows versus agents: the patterns that ship65 min
- ReadBuilding effective AI agents · Anthropic
- WatchHow We Build Effective Agents: Barry Zhang, Anthropic · AI Engineer
- DoClassify your feature as prompt chain, router, parallel work, orchestrator with workers, evaluator and optimizer, or true agent. Write one paragraph on why the simplest pattern that works is your choice and what would force you up a level.
Tool use and MCP: the contract with your systems65 min
- ReadWriting effective tools for AI agents · Anthropic
- DoList the tools your feature would call, split into read and write. For each: the permission it needs, whether the action is reversible, and whether a human approves. Then decide in two sentences whether you connect through MCP servers, direct API calls, or both.
Harnesses, autonomy and multi-agent systems: how much rope, at what cost70 min
- ReadEffective harnesses for long-running agents · Anthropic
- ReadHow we built our multi-agent research system · Anthropic
- DoSet the autonomy level for your feature (suggests only, acts with approval, acts and reports, acts unwatched) and write why in three sentences. Add the token multiplier you expect (single call, agent loop, multi-agent) to your cost assumptions.
Coding agents in your engineering org, then finish the record65 min
- ReadA year of vibe coding, and why agentic engineering fits better · Andrej Karpathy
- ReadWhy it still matters to understand the code agents write · Geoffrey Litt
- DoWrite the final sections of the architecture decision record: decision, consequences, and what would change the decision. Add one paragraph on how the team will use coding agents on this feature: review rules, what must be read line by line, and how you will measure the productivity claim.
Milestone 1 project · about 6 hours
Architecture decision record for one AI feature
Decide how one AI feature should be built, and write down why and what would change the decision.
- Architecture decisions
- Retrieval vs fine-tuning
- Context budgets
- Output contracts
- Permissions
- Autonomy levels
Courses that teach this
- Agentic AI
DeepLearning.AI, Andrew Ng · about 8 hours · Free videos; labs and certificate extra
Build agents with reflection, tools, planning and evals, with no framework.
- Building with the Claude API
Anthropic · 9 hr
Call the Claude API, then build tool use, RAG, evals, MCP and agents.
Build it
Pick one AI feature your company wants or already runs, and write the decision to be made.
Compare the four ways to give the model your data: prompt, retrieval, fine-tuning, tools.
Set the context budget and the output contract your engineers will build against.
Write the permissions table and the autonomy level, with the human approval points.
Write the decision, its consequences, and what would reverse it.
You finish with
A two to three page architecture decision record in your team's format: context, options considered (prompt only, retrieval, fine-tuning, tools and agents), decision, interfaces, permissions, consequences, and what would change the decision.
Check your work
At least three options are compared on cost, risk and effort.
The permissions table names what the model may do alone.
It says what would make you reverse the decision.
An engineer could start building from it.
See how others did it
- microsoft/agent-framework: docs/decisions
microsoft/agent-framework
Real ADRs on approvals, context compaction, structured output, and prompt-injection defense.
- Context Compaction Strategy for Long-Running Agents
microsoft/agent-framework
See how a team weighed four options for keeping agent context within budget.
- Levels of Autonomy for AI Agents
knightcolumbia.org
Five named autonomy levels, operator to observer, to state your feature's level.
- Building effective agents
anthropic.com
Choose the simplest option: single call with retrieval, workflow patterns, or full agent.
Milestone 2 · Hours 18 to 33 · 3 sections · 15 lessons
Models, vendors and cost
Learn what AI really costs, then compare models and vendors on your own terms.
Hours 18 to 220/15
By the end you have a cost-per-task model for your feature at three volumes, built from published prices you recorded with their dates, and can name the two levers that cut it most.
In the Encyclopedia: Inference Cost & Token Economics, Prompt Caching, Semantic Caching
Token economics: why input and output are priced differently60 min
- WatchHow KV Cache Speeds Up LLMs for Faster AI Models on GPUs · IBM Technology
- ReadCompare AI models: pricing and context · OpenRouter
- DoStart the cost model: estimate input tokens, output tokens and calls per task for your feature, then multiply by the published input and output prices of three models from the comparison page. Record each price with the date you read it.
Latency: prefill, decode, and what the user feels60 min
- Read
- WatchAI Inference: The Secret to AI's Superpowers · IBM Technology
- DoWrite the latency budget for your feature: the time to first token and the total time a user will accept, and which of streaming, a smaller model, shorter prompts or batching you would use to meet it. One paragraph.
Prompt caching: the cheapest saving you will ever make65 min
- ReadPrompt caching · Anthropic
- ReadPrompt caching · OpenAI
- DoReorder your feature's prompt so the stable parts come first, using your context budget. Recompute the cost model with the cached input price from both vendor pages, and record the cache discount and its conditions (minimum length, time to live).
Semantic caching: when a near-duplicate question should not reach the model (short course, first half)65 min
- CourseSemantic Caching for AI Agents · DeepLearning.AI
- DoDo the first half of the short course, about 45 minutes. Then decide whether your feature's traffic repeats: estimate the share of near-duplicate questions, the hit rate at which the cache pays for itself, and the risk of a stale or wrong cached answer. Write the decision as a short paragraph with the similarity threshold you would set.
Cost per task at three volumes, and the agent multiplier70 min
- ReadI compiled LLM inference pricing across 7 providers: the caching · r/MachineLearning
- ReadUsage accounting: track token usage · OpenRouter
- ReadState of AI: a 100 trillion token usage study · OpenRouter
- DoFinish the cost model: pilot, one team and whole-company volumes, with and without caching, plus an agent variant at 5 to 15 calls per task. Put the table at the top of your scorecard file and write the two levers that matter most, one sentence each.
Hours 23 to 280/18
By the end you have a shortlist of five to eight candidate models and gateways with published prices and context limits, and a written decision on API versus self-hosting with the numbers behind it.
In the Encyclopedia: Open-Weights & Small Language Models, Model Routing & AI Gateways, GPU & TPU Computing
Open weights versus closed APIs: what you actually get65 min
- WatchShould You Use Open Source Large Language Models? · IBM Technology
- ReadThe Paradox of Open Weights, but Closed Source · r/LocalLLaMA
- DoWrite a two-column table for your feature, closed API versus open weights, with rows for whether data leaves your boundary, price per million tokens, who patches the model, exit cost and license terms. One sentence on which column wins today and what would flip it.
Small models and where they belong70 min
- ReadOllama: run open models locally · ollama.com
- ReadLLM rankings by real usage · OpenRouter
- DoAdd three open-weight candidates (one small, one mid-size, one frontier class) to the scorecard with license, parameter count and the hosted price from the rankings page. Note which sub-tasks of your feature a small model could handle alone.
Leaderboards and arenas: the gap between a benchmark and your task60 min
- Read
- WatchWhat are Large Language Model (LLM) Benchmarks? · IBM Technology
- DoFill the quality columns of the scorecard: arena rank, one public benchmark that resembles your feature, and a column headed 'our 30 cases' left blank for now. Write two sentences on why the public numbers are not enough to choose.
Gateways and routing: one interface, many models, a spend cap70 min
- Read
- ReadAuto Router: intelligent model selection · OpenRouter
- ReadProvider routing · OpenRouter
- DoDecide whether your feature goes through a gateway. Write the routing policy as a table: default model, cheap fallback, when to escalate to a reasoning model, the daily spend cap, and the logs the gateway must keep.
GPUs, AI factories and the self-hosting decision65 min
- ReadWhich GPU for deep learning? · Tim Dettmers
- Read
- DoWrite the self-host versus API decision for your feature: the GPU memory the model needs, a monthly cloud GPU price from any provider page you can read (with the date), the engineer-months to run it, and the API cost at your expected volume. Decide, and put the paragraph in the scorecard.
Hours 29 to 330/15
By the end you have a finished model and vendor scorecard with weighted criteria, real prices and a one-paragraph recommendation you could read to the board.
In the Encyclopedia: Build, Buy or Partner, Evaluating AI Vendors and Procurement, AI Platforms
Buy, boost or build65 min
- ReadBuy, boost, or build? Choose your path to generative AI (MIT Sloan) · mitsloan.mit.edu
- DoWrite the three options for your feature (buy a product, boost a vendor model with your data, build on raw models) as rows with time to value, lock-in, differentiation, running cost and the team needed. Choose one and give the reason in two sentences.
What enterprises actually buy, and why projects fail65 min
- Read
- DoList the five criteria you will weight in the scorecard (for example quality on your cases, price per task, data handling, exit cost, support) and give them weights that sum to 100. Write one sentence on why the heaviest weight sits where it does.
Vendor evaluation: the questions to ask and the evidence to demand65 min
- Read
- ReadWhat is Third-Party Risk Management (TPRM)? · IBM Think
- DoWrite the 12 to 15 questions you will send every shortlisted vendor: training on your data, retention, sub-processors, model change notices, evals they publish, uptime commitments, incident reporting, export and exit. Mark the three that are deal-breakers.
Platforms: hosted models, evals, serving and observability on one bill65 min
- ReadWhat is an AI Platform? · IBM
- ReadBuilding an enterprise-ready generative AI platform on AWS (AWS Prescriptive Guidance) · docs.aws.amazon.com
- DoCompare three routes for your feature (a cloud provider's AI platform, a gateway plus best-of-breed tools, a vendor's end-to-end product) in a table: what you get, what you still build, monthly cost at your volume, and lock-in. Add a scorecard row for each.
Finish the scorecard and write the recommendation65 min
- Read
- DoScore every candidate against the weighted criteria, with prices and the dates you read them. Write the one-paragraph recommendation: which, why, cost per task, the exit plan, and the one risk you are accepting. Have one engineer and one finance person read it.
Milestone 2 project · about 8 hours
Model and vendor selection scorecard with real prices
Compare models and vendors for one feature on real prices and your own test cases, then recommend one with an exit plan.
- Cost modeling
- Caching
- Open vs closed models
- Gateways
- Vendor evaluation
- Exit planning
Courses that teach this
- Transform your business with AI
Microsoft Learn · about 2.5 hours
Four modules on where AI fits in a business and how to adopt it.
- Semantic Caching for AI Agents
DeepLearning.AI · 1 hour 24 minutes · Free for now, certificate extra
Cut LLM cost and latency by caching answers to similar questions.
Build it
Build a cost-per-task model from published prices, with the date you read each price.
Run it at three volumes, with and without caching.
Shortlist five to eight open and closed models and gateways.
Weight your criteria and score each candidate, including API versus self-hosting.
Run your own test cases on the top candidates and write the recommendation and exit plan.
You finish with
A spreadsheet with the cost model at three volumes, five to eight candidates scored against weighted criteria with prices and the date read, a vendor question list, and a one-paragraph recommendation with the exit plan.
Check your work
Every price has the date you read it.
Cost per task is shown at three volumes.
Your own test cases, not public benchmarks, decide the ranking.
The recommendation includes how you would leave.
See how others did it
- LLM pricing calculator
llm-prices.com
Compute cost from token counts using current prices, with open JSON price history.
- BerriAI/litellm
BerriAI/litellm
Open-source gateway: one API for 100+ providers, fallbacks, spend tracking, thousands of prices.
- LLM Leaderboard
artificialanalysis.ai
Sortable table of intelligence, cost per task, time per task, first-token latency.
- Artificial Intelligence Playbook for the UK Government (HTML)
gov.uk
Real government buying guidance: avoid vendor lock-in, hidden costs, fallback if AI terminated.
Milestone 3 · Hours 34 to 55 · 4 sections · 20 lessons
Evals, security, operations and governance
Learn to evaluate, secure, roll out and govern an AI feature.
Hours 34 to 390/16
By the end you have written success criteria, a 30-case golden set and a judging rubric for your feature, and can explain to the board why a vendor demo is not an evaluation.
In the Encyclopedia: LLM Evaluation & Benchmarks, Agent Evaluation, AI Hallucinations
Why your AI product needs evals, and what an eval is65 min
- ReadYour AI product needs evals · Hamel Husain
- ReadDefine success criteria and build evaluations · Anthropic
- DoWrite the success criteria for your feature: three metrics (task success, a quality measure, a harm or refusal measure), each with a target number and how it is measured. Add a paragraph on what you will not measure yet and why.
Build the golden set75 min
- ReadLLM evals: frequently asked questions · Hamel Husain
- ReadTask-Specific LLM Evals that Do & Don't Work (Eugene Yan) · eugeneyan.com
- DoWrite 30 test cases for your feature as a table: input, expected answer or acceptance rule, source of truth, difficulty, and the failure it guards against (10 easy, 10 hard, 10 adversarial or out of scope). Take at least 10 from real user questions or tickets.
Judges, and hallucination as a measured thing60 min
- ReadWhy language models hallucinate · OpenAI
- ReadReduce hallucinations · Anthropic
- DoWrite the judging rubric: a 1 to 5 scale with an example at each level, the rule for an unsupported claim, and when a person must grade instead of a model. Grade five golden cases by hand to calibrate it.
Reading a vendor's numbers: benchmarks, contamination and your own run70 min
- ReadLLM Evaluation | IBM · IBM
- ReadWorking with evals · OpenAI
- ReadHow do AI engineers actually evaluate LLM/RAG systems in practice? · r/learnmachinelearning
- DoRun your 30 cases against two candidate models, by hand or with a colleague's script, and record pass rates in the scorecard column you left blank. Write two sentences on how the result compares with the public leaderboard.
Evaluating agents: trajectories, cost and safety, not just answers65 min
- ReadDemystifying evals for AI agents · Anthropic
- Read
- DoIf your feature calls tools, add 10 agent cases to the golden set that check the path taken: the right tool called, no forbidden action, steps under a cap, cost under a cap. Then write the eval section of the rollout plan: what runs on every prompt change and what runs weekly.
Hours 40 to 440/16
By the end you have a threat model for your feature, a guardrail design with its human approval points, and a red-team checklist your team can run before launch.
In the Encyclopedia: Prompt Injection & Jailbreaking, AI Guardrails, Red Teaming AI Systems
Prompt injection: what it is and why a filter does not fix it75 min
- ReadPrompt injection: what's the worst that can happen? · Simon Willison
- ReadOWASP GenAI Top 10: Prompt Injection · genai.owasp.org
- WatchSecuring AI Agents: How to Prevent Hidden Prompt Injection Attacks · IBM Technology
- DoWrite the first page of the threat model: every place untrusted text enters your feature (user input, documents, web pages, tool results, email) and what an attacker could make the model do from each.
The lethal trifecta: private data, untrusted content and a way out60 min
- ReadThe lethal trifecta for AI agents · Simon Willison
- Read
- DoCheck your feature against the trifecta: does it read private data, process untrusted content, and have any channel out (send, post, call, write)? If all three, decide which one you remove or put behind approval. Write the decision and update your permissions table.
Guardrails: input checks, output checks, permissions and approval65 min
- ReadHow to implement LLM guardrails · OpenAI
- Read
- DoDesign the guardrail stack for your feature as a table: layer (input filter, schema validation, tool allow-list, output check, human approval), what it catches, what it costs in latency, and what the user sees when it fires. Mark which layers block and which only log.
Red teaming: break it before someone else does65 min
- ReadChallenges in red teaming AI systems · Anthropic
- WatchOWASP's Top 10 Ways to Attack LLMs: AI Vulnerabilities Exposed · IBM Technology
- DoWrite a 20-item red-team checklist for your feature: five direct injections, five indirect ones hidden in documents or tool results, five data exfiltration attempts, five scope or policy violations. Run five of them against any assistant you can access and record what happened.
NIST's attack taxonomy and the security section of the plan65 min
- ReadGuidelines for secure AI system development · NCSC and CISA
- DoWrite the security section of the rollout plan: threat model summary, guardrail table, red-team checklist with owner and cadence, and the three findings that halt a rollout. Send it to your security lead for comment.
Hours 45 to 500/14
By the end you can describe the production loop for a model feature (version, evaluate, trace, watch cost, catch regressions) and have written the rollout stages, dashboard and alerts for your feature.
In the Encyclopedia: LLMOps, ML Monitoring & Observability, Model & Data Drift
What changes when the model is an API: LLMOps in one page65 min
- ReadWhat we learned from a year of building with LLMs · Eugene Yan and others
- DoWrite the production loop for your feature as a numbered list: where prompts are versioned, what runs before a prompt change ships, what is traced per request, where cost is watched, and who is paged. Name the owner of each step.
Production ML systems: Google's checklist against your feature75 min
- Course
- DoWork through the module (Google estimates 70 minutes; skip the exercises you already know). List the five items your feature would fail today and what each would take to fix.
Monitoring and observability: traces, cost and quality in production60 min
- Read
- ReadEvidently AI · ML Monitoring · evidentlyai.com
- DoSpecify the dashboard for your feature: ten panels (requests, p50 and p95 latency, cost per task, cache hit rate, error rate, guardrail fires, judge score on sampled traffic, thumbs-down rate, tool failures, tokens per task), each with an alert threshold and the person paged.
Drift: the world changes and no error is raised65 min
- Read
- ReadData distribution shifts and monitoring · Chip Huyen
- DoList the drift sources for your feature (user mix, document corpus, vendor model updates, prompt edits, seasonal topics), and for each the signal that would reveal it and how often you check. Add 'the vendor silently updated the model' as a row and decide how you pin versions.
Rollout stages: offline gate, shadow, canary, A/B and the kill switch65 min
- Read
- ReadLLM evaluation: a beginner's guide (Evidently AI) · evidentlyai.com
- DoWrite the rollout stages for your feature: offline gate (golden set pass rate), shadow (model runs, nobody sees), canary (1 to 5 percent of traffic, which users), A/B (metric, duration, decision rule), full release. For each: entry criteria, exit criteria, who decides, and the kill switch.
Hours 51 to 550/17
By the end you can state which rules apply to your feature (NIST AI RMF, the EU AI Act tier, GDPR Article 22, your own policy), have a governance and incident process in the rollout plan, and have a team proposal ready for the board.
In the Encyclopedia: AI Governance, AI Regulation & Governance, Data Protection Law and AI (GDPR and beyond)
Governance and the NIST AI RMF: govern, map, measure, manage60 min
- Read
- WatchMastering AI Risk: NIST's Risk Management Framework Explained · IBM Technology
- DoWrite the governance page of your rollout plan: the model inventory entry for your feature (purpose, model, vendor, data, owner, risk tier), the approval gate it passes, and the audit trail you keep. Map each item to one of NIST's four functions.
The EU AI Act and US rules: which tier is your feature60 min
- Read
- ReadAI Act | Shaping Europe’s digital future · European Commission
- DoClassify your feature under the EU AI Act (prohibited, high risk, transparency duty, minimal) with the article or annex you relied on, and note the US rules that touch it (state law, your sector's regulator). Write three sentences on what the classification obliges you to do before launch.
Data protection: GDPR, Article 22 and the CNIL recipe60 min
- Read
- DoWrite the data protection check for your feature as one table: personal data in prompts, retrieved documents, logs and traces, and vendor training; lawful basis; retention; whether any output is a decision about a person under Article 22; and the human review that would take it out of scope.
Incidents: the database, the definition and your response process70 min
- ReadDefining an AI Incident (AI Incident Database) · incidentdatabase.ai
- ReadWelcome to the Artificial Intelligence Incident Database · incidentdatabase.ai
- ReadMIT AI Risk Repository · MIT
- DoFind three incidents in the database from your industry or feature type and, for each, name the control in your plan that would have caught it. Then write the incident process: severity levels, who is told within an hour, how you roll back, and what is added to the golden set afterwards.
Team shape, hiring, and the board conversation75 min
- ReadWhat Is an AI Center of Excellence? · IBM Think
- ReadThe Cybernetic Teammate · Ethan Mollick (One Useful Thing)
- DoWrite the team proposal: who owns evals, the gateway and spend, security review and on-call for the feature; which roles are new hires and which are trained existing engineers; the platform-versus-embedded split; and the budget line. Then outline the five-slide board summary: the decision, the recommendation and cost per task, the eval numbers, the risks and guardrails, and what you need approved.
Milestone 3 project · about 10 hours
Evaluation and rollout plan with its guardrails
Write the plan that takes the feature from a working prototype to production and keeps it there.
- Golden sets
- Rubrics
- Threat modeling
- Guardrails
- Red teaming
- Rollout
- Drift monitoring
- Governance
Courses that teach this
- Production ML systems
Google · about 1 hour
How machine learning systems fail in production and how to test and monitor them.
- AI security fundamentals
Microsoft Learn
Learn AI attack techniques and controls, then plan red-teaming exercises for LLM apps.
- Evaluating AI Agents
DeepLearning.AI · 2h41m · Free for now, certificate extra
Trace an agent, evaluate router and skills, run experiments to improve it.
Build it
Write success criteria, a 30 to 40 case golden set and a judging rubric.
Run the golden set against a working prototype and record pass rates.
Write the threat model, the guardrails and a red-team checklist your team can run.
Define rollout stages, the dashboard, the alerts and the drift checks.
Write the governance page, the data protection check and the incident process, with named owners.
You finish with
A plan of about ten pages plus a 30 to 40 case golden set, ready to hand to the engineering team and to show the security lead, the data protection officer and the board.
Check your work
Success criteria are numbers, set before launch.
Each threat maps to a guardrail and a test.
Each rollout stage has a rule to stop.
Every task has a named owner.
See how others did it
- GPT-4o System Card
arxiv.org
Real launch record: four red-team phases, over 100 testers, risks mapped to mitigations.
- Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile
nvlpubs.nist.gov
Twelve named generative AI risks with suggested govern, map, measure, manage actions.
- Chapter 16 - Canarying Releases
sre.google
Stage a gradual rollout, pick canary metrics, decide population and duration.
- evidentlyai/evidently
evidentlyai/evidently
Open-source drift tests, LLM evals, pass/fail test suites, and a monitoring dashboard.
Check yourself at the end
You can explain to the board what a language model does and does not do, and defend one architecture choice (prompt, retrieval, fine-tuning, agent) in writing.
You can put a cost per task on an AI feature from published prices, with and without caching, and say which lever cuts it most.
You can run a model and vendor selection with weighted criteria, real prices and your own test cases instead of a vendor demo.
You can specify an evaluation (success criteria, golden set, judging rubric) and a staged rollout with a dashboard, alerts and a kill switch.
You can threat-model an AI feature against prompt injection and the lethal trifecta, design its guardrails, and hand your team a red-team checklist.
You can place the feature under the rules that apply (NIST AI RMF, the EU AI Act tier, GDPR Article 22), run an incident process, and propose the team that owns it.