| Agentic AI opportunity portfolio | Candidate workflows, value hypotheses, autonomy levels, risks, and dependencies | Prioritises pilots and avoids technology-led use-case selection | Business priorities, process owners, performance evidence |
| Readiness and risk assessment | Data, APIs, identity, security, privacy, governance, skills, and operating readiness | Identifies blockers, remediation, and approval requirements | Architecture, policies, inventories, risk findings |
| Target agent architecture | Models, orchestration, tools, memory, data access, controls, and observability | Guides build, procurement, integration, and assurance | Platform standards, integration constraints, hosting strategy |
| Evaluation and control plan | Test sets, metrics, thresholds, red-team scenarios, approvals, and fallback | Defines release evidence and ongoing quality monitoring | Representative tasks, failure tolerances, policy requirements |
| Prototype or pilot | Limited workflow implementation in a controlled environment | Tests technical feasibility, user value, and operating assumptions | Sandbox access, users, sample data, acceptance criteria |
| Operating model and transition pack | Roles, procedures, change control, incident handling, reporting, and training | Establishes accountable ownership after deployment | Support model, governance forums, service-management processes |