Five decisions, one page
Sovereign by design. Governed by evidence. Measured by value. The Board is asked to approve: data sovereignty (customer-identifying data does not leave Thai jurisdiction except reversibly tokenised), accountability (CRO chairs the AI Governance Committee; build and approve are separated), funding (gateway and sovereign GPU cluster as shared infrastructure), sequencing (no customer-adjacent use case before gateway, register and evaluation harness operate) and the cost of sovereignty (~THB 11 million per year as a standing line item).
The problem
Shadow AI · one-way risk flow · no refuser · no value ledger.
Eight layers, two loops, five gates
Govern · Recognise · Orient · Uphold · Navigate · Design · Enforce · Demonstrate. Gates run through existing bodies — "If the committee has never refused anything, it is not governing."
Scope
18,000 employees, 13 use cases, 6 Tier 1, 20 control domains; BOT-supervised, CII, full PDPA exposure.
Where inference happens
Sovereign hybrid was selected over all-frontier and all-sovereign. A contractual control is not evidence; gateway logs are. The classifier in the AI Gateway decides the destination before egress.
Economics
Illustratively at 2.3B tokens/month the hybrid costs THB 51 per employee per month more — a regulatory and resilience decision, not a saving. Break-even sits near 4.3B tokens/month.
Sequencing, risks and board pack
Phase 0–1 (months 1–7), Phase 2 (6–10), Phase 3 (9–13). Key risks R1, R3, R7, R5, R10. One quarterly pack reports risk and value together.