TLDR
Executive briefThe chart changed; the decisions and queues did not
- Design roles around recurring work events, authority, evidence and service interfaces, not fashionable titles or current product features.
- Place work across six families for outcomes, human-AI operation, product and engineering, assurance, shared capability, and transition and ecosystem duties.
- Use five mutations: enrich an existing role, split incompatible rights, create temporary or persistent roles, and dissolve work that should disappear.
- Keep one accountable outcome owner along a spine that links workflow decision, AI behaviour, human action, evidence, challenge and final authority.
- Test review volume, queues, conflicts, access and transfer before claiming that oversight, independent challenge or temporary embedding is real.
An enterprise publishes an impressive AI organisation chart. It adds an AI product manager, an AI adoption lead, an AI risk owner and an AI governance committee. Yet customer outcomes remain with no single owner. Data scientists are asked to capture benefits they cannot control. Product staff challenge their own evidence. Reviewers inherit twice the escalation volume with no new capacity. A vendor attends approval meetings as if its expertise conferred internal authority. The titles changed while the operating role system stayed hidden.
Enterprise AI does not simply produce a catalogue of new jobs. It redistributes tasks, decisions, evidence and liability across existing roles, temporary transformation work, persistent specialists, shared services, partners and AI systems. Adding a title without changing those interfaces creates shadow work and conflicting authority. Preserving every old approval layer while adding new controls creates queues that consume the promised value.
The unit of design is a Role Contract for a recurring work event. It states the outcome, decision and consequence; AI and human contributions; non-delegable judgment; evidence owed; upstream and downstream interfaces; rights to propose, specify, approve, challenge, veto and assure; workload and capacity; prohibited combinations; incident, escalation and recourse duties; proficiency, support, change triggers, transfer and expiry.
NIST describes a broad set of lifecycle actors and differentiated responsibilities across governance, domain expertise, design, development, deployment, operation, evaluation, users and affected communities.13 Its Core and Playbook connect roles to executive responsibility, communication, oversight, incidents and decommissioning.25 EU and UK sources provide formal and workforce context in their applicable domains, while ILO and OECD evidence shows why task reorganisation, job quality, worker participation and skill demand matter beyond technical AI roles.68912
The Enterprise AI Role System, Role Contract, Role Mutation Matrix, Decision Accountability Spine, Role Interface Contracts, Role Load and Conflict Test and Enterprise AI Role-System Designer are this article's synthesis. They extend Paper 132's capability cells by deciding how capabilities are bundled across roles, teams, services and partners. They remain distinct from the strategic decision-right architecture in Paper 010, operating decisions in Paper 041, Centre of Excellence design in Paper 042 and functional rights grammar in Paper 045.
Enterprise AI Role SystemOrganise six families around the service, not the label
Outcome and workflow roles own the business service, decision population, adoption, difficult exceptions, affected-party experience and benefit capture. Human-AI operating roles frame work, use or supervise AI, verify evidence, make bounded decisions, escalate and retain professional accountability. These families keep business purpose and daily judgment visible.
Product, data and engineering roles own product direction, data meaning, system design, model and tool integration, reliability, security, monitoring and change. Assurance and challenge roles independently evaluate risk, fairness, privacy, security, control, compliance, evidence and audit without owning delivery. Separation is defined at the event and right, not necessarily by a large department.
Shared capability roles provide platforms, evaluation services, procurement support, incident coordination, learning, standards, portfolio insight and specialist pools. Transition and ecosystem roles embed expertise, manage vendors, represent workers and affected groups, transfer capability, redesign work and retire obsolete duties or services. Some transition work should end by design.
One person can wear several compatible hats in a small organisation. The system still names each hat, the event at which it applies and any rights that must be separated. A product and data owner may be the same person for a low-consequence service, while high-consequence challenge comes from an external assessor. A vendor can supply evidence and expertise but cannot accept the buyer's risk or approve remedies for affected people.
| Family | Owns or provides | Boundary |
|---|---|---|
| Outcome and workflow | Service outcome, population, exceptions, adoption, recourse and benefit | Cannot delegate business accountability to technical specialists |
| Human-AI operating | Framing, verification, bounded decision, escalation and professional judgment | Cannot own model or policy choices without access and authority |
| Product, data and engineering | Direction, meaning, design, integration, reliability, security and change | Cannot independently assure its own delivery evidence |
| Assurance and challenge | Independent risk, fairness, privacy, security, compliance and audit | Challenge rights need evidence and service times, not universal delay |
| Shared capability | Platforms, evaluation, procurement, incidents, learning and standards | Shared demand, priority and capacity must be explicit |
| Transition and ecosystem | Embedding, vendors, worker voice, transfer, redesign and retirement | Temporary work needs a sunset; external expertise cannot approve internal use |
Role ContractWrite the event, authority and evidence before changing the title
A Role Contract is this article's synthesis. It begins with an outcome, recurring decision and consequence, then names the role holder and population served. It separates the AI contribution from human authority and non-delegable judgment. The contract identifies inputs, evidence owed, records created, upstream requests and downstream acceptance.
Rights use precise verbs. A role may propose a change, specify a constraint, approve deployment, challenge evidence, veto a condition or assure a control. The right belongs to a decision object and event. “Risk approval” is too broad. “Veto release when the severe-harm evaluation lacks the declared population evidence, with a two-day response and executive escalation” is operable.
Workload belongs in the contract. State arrival rate, volume, review duration, queue ceiling, peak demand, service time, availability and fallback. A reviewer with formal authority but insufficient time cannot change the outcome. An accountable operator without access to model, policy or data evidence holds liability without control.
The contract closes with prohibited combinations, incidents, recourse, proficiency, support, change triggers, transfer and expiry. A delivery role cannot independently assure its own work. A vendor cannot approve internal risk acceptance. A temporary translator should not become a permanent relay. Role grade and reward should recognise consequential judgment, emotional load, learning and added accountability rather than celebrating output volume alone.
| Clause | Required content | Receipt |
|---|---|---|
| Outcome and authority | Decision, consequence, population, AI contribution, human authority and non-delegable judgment | One accountable owner and bounded rights |
| Evidence and interfaces | Inputs, artefacts, records, request, response, version, exception and acceptance | Traceable handoff and decision evidence |
| Load and conflicts | Volume, review time, queue, service level, availability and prohibited combinations | Capacity proof and separation control |
| Duty and support | Incident, escalation, recourse, proficiency, specialist help and worker protection | Executable operating path |
| Change and expiry | Trigger, transfer condition, succession, sunset and dissolved duties | Renewed or closed role state |
Role Mutation MatrixEnrich, separate, time-limit, institutionalise or remove
The Role Mutation Matrix is this article's synthesis. Enrich adds bounded AI duties to an existing role while preserving coherent accountability. A customer adviser can verify suggestions and escalate new failure patterns without becoming responsible for model policy. Split separates delivery from independent challenge, approval from execution, or high from low consequence when one contract contains incompatible rights.
Create temporarily establishes migration, translation or embedded-expertise work with an artefact-transfer and sunset mandate. Create persistently establishes a specialist or shared service when repeated demand, independence, scarce expertise or economies of scale justify it. Dissolve removes a role or duty when work disappears, is absorbed by a better workflow or survives only as an information relay.
A new title is justified only after the event and load are measured. Several recurring cells may support a persistent evaluation service. One deployment may need a temporary forward-deployed engineer. An old committee that forwards papers between product and executives can disappear once proposal, evidence, escalation and decision rights are placed directly. Dissolution is design work, not an afterthought.
Mutation also affects grade, reward and transition. Enriched roles may carry greater decision consequence or emotional load. Split duties need career paths in both delivery and challenge. Temporary roles need a credible destination after sunset. Dissolved work requires fair consultation, redeployment and knowledge preservation. The system should remove obsolete reporting before adding new control tasks.
| Move | Use when | Control |
|---|---|---|
| Enrich | Bounded AI work fits existing outcome and authority | Proficiency, support, capacity and explicit limits |
| Split | Delivery and challenge, build and approval, or consequence bands conflict | Separate holders, events, reviewers or external assurance |
| Create temporarily | Migration, translation or embedding has a finite transfer purpose | Artefacts, recipients, milestones, succession and sunset |
| Create persistently | Demand, independence or scarce expertise is durable | Service catalogue, queue, funding and portfolio evidence |
| Dissolve | Work disappears or an unnecessary relay survives | Close records, rights, workload and transition duties |
Decision Accountability SpineKeep one outcome owner while expertise and vetoes remain distributed
The Decision Accountability Spine is this article's synthesis. It links enterprise outcome, workflow decision, AI behaviour, human action, evidence, challenge and final authority. Every material event has one accountable outcome owner even when several roles propose, specify, constrain, challenge or assure parts of it.
The spine prevents two errors. First, a technical owner is not made accountable for adoption or benefit without business authority. Second, distributed vetoes do not become duplicated accountability. Security may block release on a declared condition. Legal may constrain purpose. Risk may challenge evidence. The outcome owner still decides within those constraints, escalates unresolved conflict and owns the service consequence.
Trace a real event from outcome to evidence and back. Which AI behaviour influenced the recommendation? Which human accepted, modified or refused it? Which version and source support the decision? Who challenges population effects? Who can suspend operation? Where does recourse arrive? A chart that cannot answer these questions does not prove accountability.
Knowledge and rights should meet without collapsing control. Organisational research argues for locating decision rights near specific knowledge while connecting them to evaluation and control systems.18 In AI work, that means domain experts can exercise bounded judgment while product, policy, assurance and executive rights remain explicit along the same event.
Role Interface ContractsRepair the handoff before calling it a talent shortage
A Role Interface Contract is this article's synthesis. For every handoff, state the request, expected response, evidence artefact, version, service time, acceptance criteria, exception and escalation. Many apparent staffing gaps are broken interfaces. Risk receives a persuasive narrative rather than testable evidence. Product receives contradictory domain requests with no priority. Operators cannot reach the owner authorised to resolve an exception.
The request should name the decision it supports. The response should be usable without private translation. The artefact should expose assumptions, configuration and evidence. Service time should reflect consequence and delivery cadence. Acceptance records whether the receiving role can act, rejects the package or opens an exception. Escalation should reach a decision owner, not another relay.
Risk challenge illustrates the point. A universal approval right without a declared evidence contract and response time can freeze delivery while adding little control. Conversely, a two-day review target is fictional when the team receives incomplete evidence and has one reviewer for ten launches. Repairing artefact quality, demand priority and capacity can solve the problem without another role.
Affected workers and users also participate in interfaces. Consultation is not a late presentation. Worker representatives need a route to influence task design, workload, monitoring, grade and transition. Affected people need complaint and recourse routes that reach someone with authority. ILO material reinforces the role of social dialogue in shaping purpose, control and job quality.10
Role Load and Conflict TestMake human review and independent challenge operationally true
The Role Load and Conflict Test is this article's synthesis. Ask whether the role can perform assigned review volume within the decision time; whether it owns an outcome and independently challenges its own evidence; whether it approves work it built or sold; whether it carries accountability without access, authority or capacity; whether several roles claim the same outcome; whether the role only relays information; and whether temporary expertise has transfer and exit.
Load begins with arrival rate and variation, not an average. Multiply review duration by expected cases, then include complex tails, rework, incidents, leave, training and peaks. Compare demand with qualified availability and queue limits. When capacity fails, contract scope, add support, change the interface or stop automation volume. A human review box in a process map cannot absorb work.
Conflict tests rights at the event. Delivery and independent challenge require separation. Build and final approval may need another reviewer. A supplier can attest to its controls but not accept buyer risk. An outcome owner can receive challenge while retaining accountable authority. In a small firm, separation may come through different times, explicit hats, peer review or external assurance rather than extra permanent departments.
Field and human-factors research cautions that AI can redistribute expertise and tasks while different automation stages place humans in different acquisition, analysis, selection and action roles.1316 Role design should therefore follow the actual division of work and failure, not the system's marketing category.
| Test | Failure signal | Design response |
|---|---|---|
| Review load | Arrival and review time exceed qualified availability or queue ceiling | Contract scope, add capacity, redesign evidence or stop scale |
| Delivery versus challenge | One holder builds, measures and independently assures the same object | Split holder, event, time or external assurance |
| Accountability versus control | Role owns consequence without access, authority or change path | Grant control or move accountability to the outcome owner |
| Duplicate ownership | Committees and functions each claim final accountability | Name one owner and typed contribution rights |
| Relay and temporary work | Role forwards information or embedding persists without transfer | Repair interface, transfer capability and dissolve the layer |
Ten role-system casesChange the contract, interface and load before changing the title
Each case identifies the Role Contract, six-family placement, mutation, accountability spine, interfaces, load and conflict, worker or affected-party implications and accountable owner. The smallest useful mutation is preferred.
1. Enrich the customer-service adviser
Contract and families: The adviser may frame a request, verify a suggestion, make a bounded service decision and escalate difficult cases. The service manager remains the outcome and exception owner; product and knowledge roles own system behaviour. Mutation: Enrich the existing operating role, not create an “AI adviser”. Spine and interface: Suggestion, human action, evidence and escalation are recorded; expert response has a service time. Load and implications: Adviser checking time and expert queues must fit demand. Grade and reward reflect added judgment, while customers retain recourse. The service manager owns the contract.
2. Remove adoption liability from the data scientist
Contract and families: The data scientist owns model analysis and technical evidence, not workflow adoption or benefit capture. Business outcome and workflow roles own those decisions. Mutation: Split technical delivery from business accountability. Spine and interface: Product evidence reaches the workflow owner through an acceptance contract with population and outcome measures. Load and conflict: No person is accountable for benefits without authority over process, incentives and users. Workers receive clear operating ownership rather than competing requests. The business service owner holds final accountability and funds the workflow change.
3. Separate product delivery from independent challenge
Contract and families: The product manager owns delivery, evidence assembly and remediation; an assurance role independently challenges risk and control. Mutation: Split incompatible rights. Spine and interface: The manager submits versioned evaluation artefacts; challenge responds against declared criteria and timing, with executive escalation. Load and conflict: The product team cannot approve its own evidence, while assurance cannot silently become the delivery owner. Workers gain a safe route to report failures. The accountable service executive decides release within valid constraints.
4. Human review fails the queue test
Contract and families: Reviewers verify consequential escalations and may refuse or correct the AI route; operations owns queue service. Mutation: Enrich only after capacity, or split high-consequence reviews into a specialist service. Spine and interface: Cases arrive with evidence, urgency and acceptance criteria. Load and conflict: Arrival rate and review duration exceed qualified availability, so nominal oversight is false. Scale stops, scope contracts and more expertise is funded. Reviewer fatigue and affected-party delay are measured. The operations owner accepts the capacity gate.
5. Forward-deployed engineer with an exit date
Contract and families: An engineer embeds in a domain to translate workflow, data and technology, while domain and product owners retain decisions. Mutation: Create temporarily. Spine and interface: The role produces mappings, tested patterns, runbooks and observed transfer to named recipients. Load and conflict: The engineer cannot become the permanent approval relay. Grade, travel, access and worker consultation are explicit. Exit occurs when recipients perform the work and artefacts pass acceptance. The transformation owner holds the sunset and transfer gate.
6. Evaluation guild becomes a durable shared service
Contract and families: A guild supplies scarce evaluation design, tooling, calibration and independent challenge across repeated workflows. Domain owners keep outcome judgment. Mutation: Create persistently because demand and independence endure. Spine and interface: Cells submit testable claims and cases; the guild returns evidence and limits within prioritised service times. Load and conflict: Portfolio demand, queue and concentration are funded, while guild members rotate and transfer repeatable practice. Workers can contribute failure cases. The assurance leader owns service capacity, not domain outcomes.
7. Risk needs an interface, not another generalist
Contract and families: Risk challenges declared evidence and conditions; product supplies evaluable artefacts. Mutation: Repair the interface before creating a role. Spine and interface: Prose is replaced by versioned population results, control evidence and unresolved limitations, with response and escalation times. Load and conflict: Missed service levels trace to incomplete packages and priority collisions rather than simple headcount. Delivery remains accountable for remediation. Worker and affected-party evidence enters the package. The accountable executive owns unresolved risk decisions.
8. Vendor expertise stops before internal approval
Contract and families: The vendor provides model facts, change notice, incident evidence and specialist explanation as an ecosystem role. Buyer product, assurance and outcome roles decide internal use. Mutation: Keep external expertise bounded; do not create buyer authority inside the supplier. Spine and interface: Evidence, version and limitations cross a contractual interface. Load and conflict: A vendor cannot approve risk acceptance, employee monitoring or affected-party remedies involving its own service. The buyer's accountable executive signs the decision and preserves recourse.
9. Dissolve the relay committee
Contract and families: A committee currently forwards product papers, risk comments and executive questions without owning a decision. Mutation: Dissolve. Spine and interface: Proposal goes directly from product to the outcome owner with independent challenge attached; named escalation replaces meeting circulation. Load and conflict: Waiting time and duplicate reporting disappear, while records and prior decisions are retained. Members return to substantive roles and consultation routes remain. The executive outcome owner closes the committee after interfaces and decision rights pass a live test.
10. Safe multi-hat design in a small enterprise
Contract and families: One person holds product and data hats for a bounded service, with each event and record distinguished. Operations owns the business outcome. Mutation: Enrich compatible duties; split high-consequence independent challenge to an external assessor. Spine and interface: Product evidence is frozen before the assessor reviews it; final authority remains internal. Load and conflict: Availability, succession and self-review boundaries are tested. Workers know which hat receives a concern. The accountable executive owns the separation and renews it when consequence or volume rises.
Enterprise AI Role-System DesignerResolve the recurring work event into one of five mutations
The Enterprise AI Role-System Designer is this article's synthesis. It returns exactly five outcomes: enrich an existing role; split conflicting duties; create a temporary transfer role; establish a persistent specialist or shared service; or remove a role because its work should disappear. It does not create a universal organisation score or recommend a new title when interface repair is sufficient.
Strong rival and failure boundaryMinimum viable separation without organisational churn
The strongest rival is right that continuous role redesign can produce title inflation, anxiety, grade disputes and churn. Formal contracts can lag emergent work. Small organisations cannot fund every specialist or independent department. People often span several families effectively, and rigid interfaces can turn collaboration into bureaucracy.
The answer is minimum viable separation and explicit hats. Create a new role only when durable demand, scarce capability, independence or a distinct service justifies it. Let existing roles absorb coherent bounded duties. In small teams, separate incompatible rights by event, reviewer, time or external assurance. Pilot contracts on real workflows and revise them from observed load, incidents and worker evidence.
Do not publish a list of fashionable titles or rename roles without changing work. Do not make an AI owner responsible for an outcome they cannot control, or make data science own adoption, benefits and every incident. Do not let product assure itself, give risk an unbounded approval right, add review without capacity, or ask operators to carry choices they cannot change.
Role design must subtract. Temporary migration work needs transfer and sunset. Committees that only relay information should dissolve. Old reporting and approval layers should not survive after direct evidence and decision interfaces replace them. Affected workers need genuine participation in workload, monitoring, grade, reward, transition and learning decisions, not a presentation after the chart is approved.
Sources have limits. NIST informs lifecycle roles and risk responsibility, while EU and UK materials apply within their legal and institutional contexts. ILO and OECD evidence describes task and worker change across studied settings. Team and human-factors studies illuminate mechanisms, not universal role blueprints.141517 The named role-system constructs are this paper's synthesis.
The final test is operational: can the role act within authority, produce or receive usable evidence, meet demand, escalate exceptions, preserve challenge, support affected people and adapt or expire when work changes? If not, the organisation chart is a promise its queues and rights cannot keep.
Evidence spineSources checked 3 September 2026
- NIST, Artificial Intelligence Risk Management Framework.
- NIST AIRC, AI RMF Core.
- NIST AIRC, Descriptions of AI Actor Tasks.
- NIST AIRC, AI Risk Management and Human-AI Interaction.
- NIST, AI RMF Playbook.
- European Union, Regulation (EU) 2024/1689, Artificial Intelligence Act.
- UK Government, AI Skills Tools Package.
- UK Government, Artificial Intelligence Playbook for the UK Government.
- International Labour Organization, Artificial Intelligence Adoption and Its Impact on Jobs.
- International Labour Organization, Social Dialogue Critical to Ensure Positive Outcomes of AI in the Workplace.
- OECD, The Impact of AI on the Workplace.
- OECD, Artificial Intelligence and the Changing Demand for Skills in the Labour Market.
- Dell'Acqua et al., The Cybernetic Teammate.
- Brynjolfsson, Li and Raymond, Generative AI at Work.
- Amershi et al., Guidelines for Human-AI Interaction.
- Parasuraman, Sheridan and Wickens, A Model for Types and Levels of Human Interaction with Automation.
- Edmondson, Psychological Safety and Learning Behavior in Work Teams.
- Jensen and Meckling, Specific and General Knowledge, and Organizational Structure.
About this paperMake the role chart tell the truth about work
The Enterprise AI Role System, Role Contract, Role Mutation Matrix, Decision Accountability Spine, Role Interface Contracts, Role Load and Conflict Test and Enterprise AI Role-System Designer are this article's synthesis. They allocate recurring work, rights, evidence, capacity and expiry without turning every capability gap into a title.