# Decision Evidence Dossier: From Informal Generative AI Use to Deliberate Organizational Capability

**Research snapshot: October 3, 2026**

The central finding is not that organizations should “adopt AI.” It is that leadership should **convert an uncontrolled collection of AI experiments into an explicit portfolio of work-system decisions**.

The best available causal evidence shows that generative AI can produce large improvements on some tasks, little benefit on others, and measurable harm on still others. In controlled and field studies, effects range from roughly **40% less time on professional writing tasks**, to **26% more completed software-development tasks**, to **15% higher customer-support productivity**, to **19% longer completion times for experienced developers working in familiar codebases**. AI can simultaneously increase productivity on tasks inside its capability frontier and reduce performance when people over-rely on it outside that frontier. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

That dispersion matters more for management than the average effect.

**The unit of decision should therefore usually be the task, workflow, or decision process—not “AI adoption” at company level.** Broad access, targeted copilots, workflow redesign, automation, decentralized experimentation and deliberate non-adoption are all defensible choices under different conditions. The burden of proof should rise with irreversibility, risk, cost and organizational change.

A useful default stance is:

> **Make experimentation easy where mistakes are cheap and reversible; demand increasingly strong evidence as AI gains access to sensitive data, influences consequential decisions, changes workflows, acts autonomously, creates recurring cost, or displaces existing capacity.**

This is a decision dossier, not an argument for acceleration.

## Leadership decision map

Leadership is facing several different decisions that are often incorrectly collapsed into “What is our AI strategy?”

<table header-row="true">
	<tr>
		<td>Decision leadership actually faces</td>
		<td>Evidence needed before deciding</td>
		<td>Reasonable outcomes</td>
	</tr>
	<tr>
		<td>**Is this activity worth supporting at all?**</td>
		<td>Baseline pain, frequency, economic relevance, current quality/cycle time</td>
		<td>Support; tolerate experimentation; postpone; explicitly stop</td>
	</tr>
	<tr>
		<td>**What problem are we solving?**</td>
		<td>Outcome metric independent of AI usage</td>
		<td>Faster completion, better quality, capacity, customer outcome, learning, or no compelling problem</td>
	</tr>
	<tr>
		<td>**Is GenAI the right intervention?**</td>
		<td>Comparison with no change, process simplification and deterministic automation</td>
		<td>GenAI; conventional software/automation; workflow change; nothing</td>
	</tr>
	<tr>
		<td>**At what level should intervention occur?**</td>
		<td>Where the bottleneck actually sits</td>
		<td>Individual assistant; team tool; workflow redesign; process automation</td>
	</tr>
	<tr>
		<td>**Which uses can remain decentralized?**</td>
		<td>Reversibility, information sensitivity, consequences of error</td>
		<td>Unmanaged/ lightly governed experimentation; approved sandbox; central control</td>
	</tr>
	<tr>
		<td>**Should the company provide an approved general tool?**</td>
		<td>Breadth of genuinely useful low-risk tasks, security requirements, utilization economics</td>
		<td>Enterprise tool; limited seats; reimbursement; no general license</td>
	</tr>
	<tr>
		<td>**Does a role-specific copilot make sense?**</td>
		<td>Repeatable role-specific work and stable context requirements</td>
		<td>Deploy; prototype; retain general assistant</td>
	</tr>
	<tr>
		<td>**Should AI act or merely advise?**</td>
		<td>Error recoverability, verification ability, authorization risk</td>
		<td>Draft only; recommend; execute with approval; bounded autonomy; no automation</td>
	</tr>
	<tr>
		<td>**Does the workflow itself need redesign?**</td>
		<td>Evidence that local time savings fail to change end-to-end performance</td>
		<td>Keep assistant; redistribute work; remove steps; redesign process</td>
	</tr>
	<tr>
		<td>**Is a pilot enough?**</td>
		<td>Objective of pilot</td>
		<td>Continue as local experiment; gather more evidence; productionize; terminate</td>
	</tr>
	<tr>
		<td>**Is evidence strong enough to scale?**</td>
		<td>Representative users/tasks, objective outcomes, guardrails, economics</td>
		<td>Expand; restrict to subgroup; redesign; stop</td>
	</tr>
	<tr>
		<td>**What governance is proportionate?**</td>
		<td>Data class, decision consequence, regulation, external exposure, autonomy</td>
		<td>Minimal rules through formal high-risk controls</td>
	</tr>
	<tr>
		<td>**Who owns the use case?**</td>
		<td>Location of business outcome and technical/control dependencies</td>
		<td>Business owner, product/process owner, centralized platform, shared accountability</td>
	</tr>
	<tr>
		<td>**What capability must users acquire?**</td>
		<td>Observed failure modes rather than generic “AI readiness”</td>
		<td>No training; contextual guidance; role-specific training; formal competence requirement</td>
	</tr>
	<tr>
		<td>**How will saved capacity be converted into value?**</td>
		<td>Downstream bottlenecks and management response</td>
		<td>More throughput; shorter queues; quality improvement; capacity reduction; no realized value</td>
	</tr>
	<tr>
		<td>**When do we stop?**</td>
		<td>Pre-agreed failure conditions</td>
		<td>Abandon; return to human process; substitute deterministic automation; re-scope</td>
	</tr>

</table>

This separation is important because the empirical literature largely measures **specific tasks under specific human–AI configurations**, rather than an abstract organizational state called “AI adoption.” Noy and Zhang tested occupational writing; Brynjolfsson, Li and Raymond studied customer-support agents; Cui and colleagues studied professional developers; Dell’Acqua and colleagues tested consultants and later P&G product-development professionals. Their different results are evidence against treating GenAI as a homogeneous intervention. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

**Decision implication:** an “AI transformation program” may be useful as an umbrella for common infrastructure and controls, but it is a poor unit for deciding whether individual uses create value.

### When organizational adoption is justified

Organizational support becomes increasingly defensible when six conditions hold simultaneously:

**A meaningful bottleneck exists.** There is repeated work whose time, quality, capacity or service level matters economically. A cool demo is not a bottleneck.

**The intervention improves an outcome that matters.** AI changes quality, cycle time, throughput, rework, customer experience, learning or another endpoint—not merely prompt volume or perceived productivity. Controlled studies demonstrate that measured gains can be real, but METR's randomized developer experiment demonstrates that users can believe themselves substantially faster while objectively becoming slower. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

**Task fit is demonstrated rather than presumed.** Dell’Acqua et al.'s BCG experiment found a “jagged technological frontier”: AI improved performance on tasks inside the model's capabilities but over-reliance could reduce performance outside them. This means superficial task similarity is insufficient evidence of reliability. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)

**Verification is economically possible.** A system whose outputs require more expert checking than the work it saves can have negative net value even when generation itself is fast. The importance of including verification is reinforced by experiments in which speed and quality move differently and by METR's finding that workflow and task-selection behavior can materially complicate productivity measurement. [3](https://arxiv.org/abs/2304.11771)

**Risk can be bounded.** Data exposure, consequential decisions, customer harm, security privileges and regulatory requirements are sufficiently controlled. In the EU, some governance is not discretionary: Article 4 of the AI Act requires providers and deployers to take measures supporting an appropriate level of AI literacy, while high-risk deployers face additional obligations including competent human oversight, monitoring and logging. [4](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-4)

**There is a credible mechanism for converting local gains into organizational value.** Cutting a worker's drafting time from 50 to 30 minutes has no automatic P&L value. It matters only when released capacity results in more valuable output, faster service, reduced backlog, avoidance of hiring, reduced external expenditure, improved quality, or some other organizational endpoint. The major causal studies establish task and worker effects; they do **not** establish a universal conversion from saved minutes to firm profit. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

Conversely, organizational adoption is **not yet justified** merely because employees like a tool, colleagues use it, competitors announce deployments, vendor benchmarks improve, a demonstration looks impressive, or a pilot reports “hours saved.”

Doing nothing—or retaining decentralized experimentation—is rational when the potential benefit is small, the task is infrequent, workflow change costs dominate, verification is expensive, errors are difficult to detect, simpler software solves the problem better, or current evidence is too weak to justify irreversible investment.

## Evidence on value and heterogeneity

The evidence base is now materially better than it was in 2023, but it remains much stronger for **task productivity** than for **firm-level economic performance**.

### What has actually been demonstrated

<table header-row="true">
	<tr>
		<td>Claimed benefit</td>
		<td>Best evidence found</td>
		<td>Evidence class</td>
		<td>What can reasonably be concluded</td>
	</tr>
	<tr>
		<td>**Time savings**</td>
		<td>In Noy & Zhang's preregistered experiment with 453 professionals, ChatGPT reduced average task time by about 40% on professional writing tasks while increasing evaluated quality. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)</td>
		<td>Controlled experiment</td>
		<td>Strong evidence for selected writing tasks; not a company-wide productivity estimate</td>
	</tr>
	<tr>
		<td>**Higher throughput**</td>
		<td>Randomized field experiments involving 4,867 developers across Microsoft, Accenture and another Fortune 100 company found a 26.08% increase in completed tasks among developers given an AI coding assistant. [5](https://pubsonline.informs.org/doi/10.1287/mnsc.2025.00535)</td>
		<td>Controlled field experiments</td>
		<td>Strong evidence that coding assistants can increase output in these settings</td>
	</tr>
	<tr>
		<td>**Higher throughput**</td>
		<td>A staggered deployment covering 5,172 customer-support agents was associated with about 15% more issues resolved per hour. [3](https://arxiv.org/abs/2304.11771)</td>
		<td>Quasi-experimental/observational field evidence</td>
		<td>Strong real-work evidence, though weaker causally than random assignment</td>
	</tr>
	<tr>
		<td>**Quality improvement**</td>
		<td>Noy & Zhang found approximately 18% higher evaluated writing quality alongside faster work. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)</td>
		<td>Controlled experiment</td>
		<td>Speed and quality need not trade off</td>
	</tr>
	<tr>
		<td>**Quality improvement—and deterioration**</td>
		<td>BCG consultants performed better on tasks inside AI's frontier but could perform worse on tasks outside it because of over-reliance on AI. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)</td>
		<td>Preregistered field experiment</td>
		<td>Quality effects are task-dependent; productivity measurement without quality is unsafe</td>
	</tr>
	<tr>
		<td>**Reduced skill bottlenecks**</td>
		<td>Less experienced/lower-skill customer-support agents obtained the largest gains; experienced/high-skill agents gained less and saw small quality declines in some measures. [3](https://arxiv.org/abs/2304.11771)</td>
		<td>Field evidence</td>
		<td>AI may diffuse elements of top-worker knowledge, but benefits are heterogeneous</td>
	</tr>
	<tr>
		<td>**Reduced skill bottlenecks in innovation**</td>
		<td>In P&G's randomized experiment, individuals using AI produced ideas comparable in evaluated quality to two-person human teams and became less constrained by their own commercial versus R&D specialization. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Preregistered field experiment</td>
		<td>AI can partly substitute for missing complementary expertise in some ideation work</td>
	</tr>
	<tr>
		<td>**Learning**</td>
		<td>Customer-service evidence is consistent with less-experienced workers learning useful patterns from AI suggestions, and gains were particularly strong on relatively uncommon problems. [3](https://arxiv.org/abs/2304.11771)</td>
		<td>Field evidence, mechanism analysis</td>
		<td>Credible evidence of knowledge diffusion; not proof that every copilot builds durable skill</td>
	</tr>
	<tr>
		<td>**Innovation**</td>
		<td>P&G participants using GPT-4 produced higher-quality product ideas, but AI did not similarly improve people's ability to select the best ideas. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Controlled field experiment</td>
		<td>GenAI can improve generation without improving evaluation</td>
	</tr>
	<tr>
		<td>**Employee experience**</td>
		<td>P&G participants receiving AI reported more positive and fewer negative emotions during the task. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Controlled treatment, self-reported outcome</td>
		<td>Evidence of improved short-run subjective task experience; not evidence of long-run engagement</td>
	</tr>
	<tr>
		<td>**Customer interaction**</td>
		<td>In the customer-support deployment, customers became more polite and less likely to ask for a manager. [3](https://arxiv.org/abs/2304.11771)</td>
		<td>Field observational/quasi-experimental evidence</td>
		<td>Some downstream customer interaction benefits are plausible and observed</td>
	</tr>
	<tr>
		<td>**Cost reduction**</td>
		<td>Klarna reported substantial marketing-production savings from GenAI, including an estimated $10 million annual reduction in marketing costs; these were company-reported figures, not a controlled evaluation. [7](https://www.reuters.com/technology/klarna-using-genai-cut-marketing-costs-by-10-mln-annually-2024-05-28/)</td>
		<td>Company case claim reported externally</td>
		<td>Useful hypothesis and case evidence, not causal proof transferable to another company</td>
	</tr>
	<tr>
		<td>**Firm revenue/profit**</td>
		<td>The strongest studies reviewed above generally stop at task, worker, quality, service or innovation outcomes rather than randomized firm P&L. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)</td>
		<td>Evidence gap</td>
		<td>Broad claims that enterprise GenAI “drives revenue” remain much less established than task-level productivity effects</td>
	</tr>

</table>

The strongest counterexample to relying on perception comes from METR. Sixteen experienced open-source developers completed 246 real issues in repositories they knew well. With early-2025 AI tools, AI access made them **19% slower**, even though they believed AI had accelerated them by roughly 20% and had expected even larger gains beforehand. The authors explicitly caution against generalizing this result to all developers or all AI systems. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)

METR's follow-up is equally important for management science. By 2026 the researchers concluded that changes in developer willingness to work without AI, task selection and parallel agent usage made later causal estimates substantially less reliable. In other words, as AI becomes embedded in work, **measurement itself becomes endogenous**: workers may choose different tasks because AI exists. [9](https://metr.org/blog/2026-02-24-uplift-update/)

### Who benefits most?

There is no universal answer.

Lower-skilled or less-experienced people benefited disproportionately in the customer-support field study, and less-experienced developers obtained greater gains in the three large coding experiments. [3](https://arxiv.org/abs/2304.11771)

But that does **not** imply a general “AI helps novices most” law. The BCG study found gains were contingent on whether the task sat inside the AI capability frontier, while METR found highly experienced developers working in mature codebases were slowed by the tested tools. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)

A more defensible hypothesis is:

> AI produces larger gains where it possesses useful task knowledge that the worker does not already have **and** where its output can be cheaply incorporated and verified.

That proposition fits the customer-service, coding and P&G findings, but should still be treated as a mechanism to test rather than a universal rule. [3](https://arxiv.org/abs/2304.11771)

### Can productivity rise while quality falls?

Yes.

The customer-support evidence shows different speed and quality effects across skill groups, and the BCG study shows that AI can produce impressive-looking but wrong answers that cause humans to underperform when they trust it outside its capability frontier. [3](https://arxiv.org/abs/2304.11771)

Therefore **throughput alone is an unsafe success metric**.

### Does individual productivity imply company productivity?

Not automatically.

The experimental evidence principally demonstrates **partial equilibrium effects**: one worker or team can perform a task differently when given AI. Organizational value depends on what happens next. An employee who drafts twice as fast may simply wait longer for approval; a developer who produces more code may create more review burden; a support agent who resolves tickets faster may reduce queues—or merely create excess capacity. The causal studies demonstrate the local effects but do not prove that each local improvement survives downstream constraints. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

Leadership should therefore distinguish:

**potential capacity created → capacity actually released → capacity redeployed → economically valuable outcome.**

Only the last step constitutes organizational value.

## Adoption options, portfolio logic and prerequisites

There is no empirically defensible global ranking of organizational approaches.

The relevant question is **which organizational commitment matches the evidence and risk of the use case**.

<table header-row="true">
	<tr>
		<td>Approach</td>
		<td>Becomes sensible when…</td>
		<td>Main upside</td>
		<td>Main trade-off / failure mode</td>
		<td>Reversibility and learning</td>
	</tr>
	<tr>
		<td>**Laissez-faire experimentation**</td>
		<td>Uses are low-consequence, data-safe and reversible; objective is discovery</td>
		<td>Very low cost; discovers bottom-up use cases</td>
		<td>Shadow AI, inconsistent handling of sensitive information, no systematic evidence</td>
		<td>Very high reversibility; fast but noisy learning</td>
	</tr>
	<tr>
		<td>**Approved general enterprise assistant**</td>
		<td>Useful tasks are numerous but shallow; main need is safer access</td>
		<td>Reduces friction and potentially shadow use</td>
		<td>Seat cost can become detached from value; broad access may institutionalize novelty</td>
		<td>High reversibility unless integrations proliferate</td>
	</tr>
	<tr>
		<td>**Policy plus contextual training**</td>
		<td>Employees are already using AI and need clear boundaries</td>
		<td>Low implementation burden</td>
		<td>Policies without useful alternatives may simply drive use underground</td>
		<td>Highly reversible</td>
	</tr>
	<tr>
		<td>**Role-specific copilots**</td>
		<td>A family of recurring tasks shares context, tools and quality criteria</td>
		<td>Better fit than generic chat; easier measurement</td>
		<td>Configuration, integration and maintenance cost</td>
		<td>Moderate reversibility</td>
	</tr>
	<tr>
		<td>**Team-level pilots**</td>
		<td>Benefits are plausible but heterogeneous or uncertain</td>
		<td>Strong learning before irreversible investment</td>
		<td>Volunteer teams and enthusiasts may not represent later users</td>
		<td>Very high if designed with controls</td>
	</tr>
	<tr>
		<td>**Targeted workflow redesign**</td>
		<td>Local task gains are proven but do not improve the end-to-end process</td>
		<td>Can turn local productivity into organizational performance</td>
		<td>Substantial process/change-management burden</td>
		<td>Moderate or low reversibility</td>
	</tr>
	<tr>
		<td>**Central AI enablement**</td>
		<td>Common procurement, identity, evaluation, security and model access are repeated across teams</td>
		<td>Economies of scale in common capabilities</td>
		<td>Central team can become a use-case approval bottleneck</td>
		<td>Platform choices create some lock-in</td>
	</tr>
	<tr>
		<td>**Distributed champions**</td>
		<td>Use cases are local and contextual while common controls already exist</td>
		<td>Faster contextual learning</td>
		<td>Quality and governance can diverge between teams</td>
		<td>High</td>
	</tr>
	<tr>
		<td>**Custom AI application**</td>
		<td>Workflow-specific context/integration creates defensible value unavailable from commodity tools</td>
		<td>Higher task fit and control</td>
		<td>Engineering, evaluation and maintenance burden; model/vendor churn</td>
		<td>Lower</td>
	</tr>
	<tr>
		<td>**Agentic/automated workflow**</td>
		<td>Actions are frequent, bounded, observable and recoverable; interfaces are stable</td>
		<td>Removes work rather than merely accelerating it</td>
		<td>Errors acquire operational side effects; permissions and monitoring become critical</td>
		<td>Potentially low once embedded</td>
	</tr>
	<tr>
		<td>**Delay / do nothing**</td>
		<td>Evidence is weak, verification expensive, risk high or simpler alternatives exist</td>
		<td>Avoids premature cost and lock-in</td>
		<td>Opportunity cost if the capability becomes genuinely useful</td>
		<td>Maximum reversibility</td>
	</tr>

</table>

The empirical basis for avoiding a one-size-fits-all answer is unusually strong: writing, support, consulting and software-development studies produce materially different effects, sometimes in opposite directions. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

### Treat adoption as a portfolio

A more useful portfolio taxonomy is not “low/medium/high AI maturity,” but seven observable classes of work:

<table header-row="true">
	<tr>
		<td>Portfolio class</td>
		<td>Management response</td>
	</tr>
	<tr>
		<td>**Promising, low-risk assistance**</td>
		<td>Permit and instrument; collect outcome data</td>
	</tr>
	<tr>
		<td>**Harmless experimentation**</td>
		<td>Leave decentralized unless common tooling materially reduces security/cost</td>
	</tr>
	<tr>
		<td>**Low-value novelty**</td>
		<td>Do not industrialize merely because employees use it</td>
	</tr>
	<tr>
		<td>**High-risk usage**</td>
		<td>Restrict until controls, legal basis, evaluation and ownership exist</td>
	</tr>
	<tr>
		<td>**Valuable but bottlenecked workflow**</td>
		<td>Redesign the workflow rather than buying more assistant licenses</td>
	</tr>
	<tr>
		<td>**Work where accountable human judgment is the product**</td>
		<td>Use AI only where it demonstrably strengthens that judgment; avoid substituting fluent output for responsibility</td>
	</tr>
	<tr>
		<td>**Stable deterministic process**</td>
		<td>Compare GenAI with conventional rules, scripts, workflow engines or software before choosing a probabilistic system</td>
	</tr>

</table>

The critical axes are directly observable: **economic value of the work; frequency; task fit; error detectability; harm if wrong; verification cost; data sensitivity; required permissions; dependency on human judgment; integration effort; and reversibility.**

There is no need to convert them into an “AI readiness score.”

### Which prerequisites are genuinely supported?

Some commonly cited prerequisites deserve more confidence than others.

**Task-level evaluation is strongly evidence-backed.** The BCG experiment demonstrates why: tasks that look similar can fall on opposite sides of a model's capability frontier. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)

**A baseline and objective outcome measurement are strongly evidence-backed.** Without them, METR's developers would have concluded almost the opposite of the measured result. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)

**Representative users matter.** Gains differ materially by experience and skill in both customer service and software development. [3](https://arxiv.org/abs/2304.11771)

**Integration into actual work matters operationally, although its universal causal effect has not been isolated.** The strongest field evidence comes from tools embedded in actual support, development and product-innovation work rather than from abstract chatbot benchmarks. [3](https://arxiv.org/abs/2304.11771)

**AI literacy is now also a legal requirement in the EU, not merely change-management advice.** Article 4 requires providers and deployers to take measures supporting an appropriate level of AI literacy, contextualized to staff knowledge, experience and use context. It does not prescribe a universal training course. [4](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-4)

By contrast, the primary GenAI evidence reviewed does **not establish as universal causal prerequisites**:

- executive sponsorship;

- a centralized AI Center of Excellence;

- “data maturity” in the abstract;

- organization-wide prompt training;

- internal champion networks;

- protected experimentation time;

- psychological safety programs;

- AI-specific incentive schemes.

Those practices may be very useful in particular organizations, but saying “GenAI adoption fails without executive sponsorship” is materially stronger than the evidence supports. The major field studies did not randomize executive sponsorship, organizational culture or centralization. [3](https://arxiv.org/abs/2304.11771)

Likewise, P&G participants given AI received approximately one hour of training and recommended prompting approaches, but because the study did not randomize training separately from AI access, it cannot establish that this training was necessary for the observed gains. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)

The correct distinction is therefore:

**implementation plausibility ≠ experimentally established prerequisite.**

## Risk, governance and workforce

Governance should follow **the consequence of the use**, not the prestige of the technology.

A worker asking an approved model to reorganize non-sensitive meeting notes and an autonomous agent changing customer accounts may use related underlying models, but they do not warrant remotely similar controls.

### A proportional governance map

<table header-row="true">
	<tr>
		<td>Exposure</td>
		<td>Characteristic examples</td>
		<td>Minimum sensible controls</td>
	</tr>
	<tr>
		<td>**Low-consequence, reversible assistance**</td>
		<td>Brainstorming, rewriting non-sensitive text, personal organization</td>
		<td>Basic acceptable-use rules, AI literacy, approved data boundaries</td>
	</tr>
	<tr>
		<td>**Internal work product**</td>
		<td>Analysis, code, internal documents, knowledge retrieval</td>
		<td>Access controls, quality expectations, source/verification practices where appropriate, logging sufficient for incident investigation</td>
	</tr>
	<tr>
		<td>**Externally consequential output**</td>
		<td>Customer responses, contracts, published claims, production code</td>
		<td>Named accountable owner, systematic evaluation, human review or equivalent control, incident path, change monitoring</td>
	</tr>
	<tr>
		<td>**Decisions affecting people or material rights**</td>
		<td>Some hiring, evaluation, access-to-service or other consequential decisions</td>
		<td>Legal classification, documented oversight, testing for relevant harms, stronger logging and governance; EU high-risk rules may apply depending on use</td>
	</tr>
	<tr>
		<td>**Agentic execution**</td>
		<td>Systems able to send, modify, approve, purchase, deploy or alter records</td>
		<td>Least privilege, bounded action space, approval gates for irreversible actions, comprehensive auditability, rollback/kill path, operational monitoring</td>
	</tr>

</table>

NIST's Generative AI Profile explicitly provides a risk-management extension to the voluntary AI Risk Management Framework for organizations deploying GenAI; it should be treated as an optional governance framework rather than law. [10](https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence)

### What is compliance versus optional good practice in the EU?

As of the October 3, 2026 snapshot, the EU AI Act is in force and has been amended by Regulation (EU) 2026/1744; current interpretation should therefore use the consolidated text rather than the original 2024 act alone. [11](https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng)

**AI literacy:** Article 4 requires AI providers and deployers to take measures supporting sufficient AI literacy among staff and others operating AI systems on their behalf, taking their knowledge, experience and context into account. This requirement is broader than high-risk AI. [4](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-4)

**High-risk AI:** where a company is a deployer of a high-risk system, Article 26 requires appropriate technical and organizational measures, competent and authorized human oversight, monitoring of system operation and, where logs are under the deployer's control, retention for an appropriate period of at least six months unless other law provides otherwise. [12](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26)

For high-risk workplace systems, Article 26 additionally requires employers to inform workers' representatives and affected workers before putting the system into service or use. This is a specific notification requirement; organizations should not assume that satisfying it exhausts separate labor-law duties that may apply in their jurisdiction. [12](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26)

The Act's Annex III covers categories of potentially high-risk systems, including employment-related applications; classification nevertheless depends on the actual system and intended use rather than the fact that something uses generative AI. [13](https://ai-act-service-desk.ec.europa.eu/en/ai-act/annex-3)

**Transparency:** Article 50 transparency requirements for certain AI systems began applying on August 2, 2026, and the Commission issued implementation guidance in July/August 2026. [14](https://digital-strategy.ec.europa.eu/en/library/guidelines-transparency-obligations-providers-and-deployers-ai-systems)

**Personal data:** the GDPR remains independently applicable where personal data are processed. The EDPB's Opinion 28/2024 specifically addresses legal basis, anonymization/pseudonymization and personal-data processing in development and deployment of AI models. [15](https://www.edpb.europa.eu/documents/opinion-of-the-board-art-64/opinion-282024-on-certain-data-protection-aspects-related-to_en)

Automated individual decision-making may additionally engage GDPR rules and established EDPB guidance; “there is a human somewhere in the process” should not be assumed to resolve those questions without examining what decision the system actually makes and the meaningfulness of human involvement. [16](https://www.edpb.europa.eu/documents/guideline/automated-decision-making-and-profiling_en)

### Acceptable-use policy should answer operational questions

A useful policy should not merely say “use AI responsibly.” It should make it possible for an employee to determine:

**What information may I provide? What systems may I use? What outputs require verification? What decisions may AI influence? What may it execute? When must I disclose AI involvement? Who remains accountable? Where do I report an incident or surprising behavior?**

An organization with strong rules but no usable sanctioned alternative may still generate shadow use. Conversely, issuing an approved assistant without specifying data and decision boundaries converts a procurement decision into a de facto governance decision.

### Human review is not automatically a sufficient control

The BCG evidence is particularly relevant here: humans can over-rely on plausible AI output and become worse at tasks beyond AI's frontier. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)

“Human in the loop” therefore has value only if the reviewer:

- has the competence to detect important mistakes;

- receives enough information and time to review;

- has actual authority to override the system; and

- is not asked to validate such a volume of output that review becomes ceremonial.

For EU high-risk AI, competence, training, authority and support are explicitly part of the human-oversight obligation. [12](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26)

## Pilot-to-scale and measurement framework

A pilot should answer a **decision question**, not demonstrate that the model can produce output.

“People used it and liked it” is enough evidence for neither workflow redesign nor a large license purchase.

### What a serious pilot should test

Before starting, specify:

**The counterfactual.** What would happen without the AI intervention?

**The unit of analysis.** Task, employee, customer case, team, workflow or process.

**The primary outcome.** For example, customer resolution quality—not “AI usage.”

**One paired productivity/quality measure.** Faster output must be examined alongside errors, rework, customer outcomes or another quality endpoint. The experimental literature shows why both dimensions matter. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

**Guardrails.** Security events, privacy breaches, inappropriate outputs, compliance failures, customer harm or unacceptable employee effects.

**Representative tasks and users.** Do not test only enthusiast volunteers doing tasks selected because AI is known to perform them well. Heterogeneous worker effects and METR's later task-selection problem make representativeness a first-order methodological concern. [3](https://arxiv.org/abs/2304.11771)

**Verification effort.** Count checking and correction, not just generation time.

**Total operating cost.** Licenses/inference, integration, training, evaluation, human review, support, incidents and ongoing maintenance.

**Pre-agreed decision thresholds.** Define the smallest benefit worth paying for and the guardrail deterioration that is unacceptable *before* seeing the result.

Where feasible, random assignment or phased rollout with a valid comparison group is substantially more informative than before/after surveys. The strongest organizational studies reviewed used randomization, preregistration or staggered deployment precisely to separate AI effects from ordinary differences among workers and tasks. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

### Evidence that justifies scale

A positive pilot should clear four separate gates.

**Outcome gate:** economically meaningful improvement appears in the intended endpoint, not merely usage or satisfaction.

**Safety/quality gate:** relevant quality, customer, security, privacy and compliance guardrails remain acceptable.

**Economics gate:** benefit survives verification, integration, model, support and maintenance costs.

**Transferability gate:** the result persists across representative tasks/users and is not dependent on a handful of champions or a deliberately easy task subset.

Only then should the next question be scale.

Even then, scale should generally proceed in **stages with continued measurement**, because models, product interfaces, usage patterns and task selection can change after initial rollout. METR's later measurement difficulties are a concrete example of the work system adapting around AI. [9](https://metr.org/blog/2026-02-24-uplift-update/)

### Evidence that should trigger redesign

Redesign rather than abandonment when:

- workers become faster but the end-to-end cycle does not improve;

- gains occur primarily in one skill group, suggesting differentiated deployment;

- verification or rework absorbs the generation savings;

- AI shifts a bottleneck from creation to review;

- workers benefit on common cases but fail on unusual high-consequence cases;

- a useful assistant requires so much repetitive human transfer that workflow integration is the actual bottleneck.

The customer-support and BCG evidence supports precisely this kind of differentiated treatment: effects vary by worker experience and task capability frontier. [3](https://arxiv.org/abs/2304.11771)

### Evidence that should trigger stopping

Stop or materially narrow a use when:

**net value remains negative after a reasonable learning period; quality deterioration persists; critical errors are too difficult to detect; verification cost overwhelms savings; users abandon it for real work; simpler deterministic automation performs better; required controls destroy the economics; or the organization cannot establish a lawful/acceptable operating model.**

A stop decision is not an AI failure. It is portfolio discipline.

### Observable measurement framework

<table header-row="true">
	<tr>
		<td>Indicator</td>
		<td>What it tells leadership</td>
		<td>Main limitation / gaming risk</td>
	</tr>
	<tr>
		<td>**Task time**</td>
		<td>Local efficiency</td>
		<td>Workers may select easier tasks; may omit verification time. METR demonstrates both perception and task-selection problems. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)</td>
	</tr>
	<tr>
		<td>**End-to-end cycle time**</td>
		<td>Whether local gains survive downstream bottlenecks</td>
		<td>Can be affected by unrelated queue/process changes</td>
	</tr>
	<tr>
		<td>**Throughput**</td>
		<td>Capacity actually realized</td>
		<td>Easy to inflate by lowering task complexity or quality</td>
	</tr>
	<tr>
		<td>**Task quality**</td>
		<td>Whether output remains useful/correct</td>
		<td>Requires credible rubric, human evaluation or objective endpoint</td>
	</tr>
	<tr>
		<td>**Error rate**</td>
		<td>Reliability</td>
		<td>Only measures detectable/defined errors</td>
	</tr>
	<tr>
		<td>**Rework**</td>
		<td>Hidden downstream cost</td>
		<td>Rework may occur in another team and be poorly attributed</td>
	</tr>
	<tr>
		<td>**Verification effort**</td>
		<td>Cost of making probabilistic output trustworthy</td>
		<td>Often invisible in product telemetry</td>
	</tr>
	<tr>
		<td>**Customer outcome**</td>
		<td>Whether internal gains create external value</td>
		<td>May lag and have many confounders</td>
	</tr>
	<tr>
		<td>**Sustained active use**</td>
		<td>Whether employees continue finding the tool useful</td>
		<td>Usage is a mediator, not an outcome; mandates can game it</td>
	</tr>
	<tr>
		<td>**Workflow penetration**</td>
		<td>Whether AI is actually part of targeted work</td>
		<td>High penetration can mean forced adoption rather than benefit</td>
	</tr>
	<tr>
		<td>**Employee experience**</td>
		<td>Friction, perceived control, stress and usefulness</td>
		<td>Self-reports may diverge sharply from actual productivity, as METR showed. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)</td>
	</tr>
	<tr>
		<td>**Skill/learning retention**</td>
		<td>Whether AI complements or substitutes capability</td>
		<td>Requires testing performance without assistance over time</td>
	</tr>
	<tr>
		<td>**Incidents / near misses**</td>
		<td>Safety and governance performance</td>
		<td>Under-reporting and rare-event statistics</td>
	</tr>
	<tr>
		<td>**Abandonment**</td>
		<td>Reveals use cases that fail in practice</td>
		<td>Does not explain whether cause is poor tool, workflow or training</td>
	</tr>
	<tr>
		<td>**Net operating cost**</td>
		<td>Whether economics work</td>
		<td>Hidden review, integration and support costs are easy to omit</td>
	</tr>
	<tr>
		<td>**Business endpoint**</td>
		<td>Revenue, cost, backlog, retention, conversion, quality or risk outcome the project was intended to affect</td>
		<td>Attribution becomes harder as distance from the AI intervention increases</td>
	</tr>

</table>

**Do not aggregate these into a single AI score.** A system that scores well on speed and badly on consequential errors should not be allowed to average those facts into a reassuring 82/100.

## Leadership questions and decision reversals

Before spending materially more, redesigning roles, committing to long-term platforms or forcing broad adoption, leadership should be able to give concrete answers to the following.

<table header-row="true">
	<tr>
		<td>Area</td>
		<td>Question</td>
	</tr>
	<tr>
		<td>**Value**</td>
		<td>What specific business or work-system problem are we trying to change?</td>
	</tr>
	<tr>
		<td>**Value**</td>
		<td>What happens if we make no AI investment for the next twelve months?</td>
	</tr>
	<tr>
		<td>**Value**</td>
		<td>What measured outcome would constitute enough improvement to justify the full operating cost?</td>
	</tr>
	<tr>
		<td>**Alternative**</td>
		<td>Have we compared GenAI with process simplification, search, templates, rules or conventional automation?</td>
	</tr>
	<tr>
		<td>**Task fit**</td>
		<td>On which exact task classes does AI outperform the current process, and where does it fail?</td>
	</tr>
	<tr>
		<td>**Heterogeneity**</td>
		<td>Which employees benefit, which do not, and are we hiding those differences inside an average?</td>
	</tr>
	<tr>
		<td>**Quality**</td>
		<td>How would we know when AI produces a fluent but substantively wrong answer?</td>
	</tr>
	<tr>
		<td>**Verification**</td>
		<td>Who can reliably verify it, how long does that take, and is verification included in the economics?</td>
	</tr>
	<tr>
		<td>**Workflow**</td>
		<td>If a worker saves an hour, what organizational outcome actually changes?</td>
	</tr>
	<tr>
		<td>**Evidence**</td>
		<td>Is the claim based on measured behavior, self-report, a vendor benchmark or a company anecdote?</td>
	</tr>
	<tr>
		<td>**Pilot validity**</td>
		<td>Were pilot users and tasks representative of the eventual rollout population?</td>
	</tr>
	<tr>
		<td>**Governance**</td>
		<td>What information may enter the system and what actions may leave it?</td>
	</tr>
	<tr>
		<td>**Accountability**</td>
		<td>Who owns the result when the AI-assisted process fails?</td>
	</tr>
	<tr>
		<td>**Legal**</td>
		<td>Does this use process personal data, affect people materially, fall into a regulated sector, or potentially meet an AI Act high-risk category?</td>
	</tr>
	<tr>
		<td>**Autonomy**</td>
		<td>What is the maximum damage the system can cause before a human can intervene?</td>
	</tr>
	<tr>
		<td>**Economics**</td>
		<td>What does the system cost after licenses/inference, integration, checking, support, monitoring and model change?</td>
	</tr>
	<tr>
		<td>**Lock-in**</td>
		<td>What must be rebuilt if the chosen model or vendor becomes unsuitable next year?</td>
	</tr>
	<tr>
		<td>**Workforce**</td>
		<td>Are we improving work, moving work to reviewers, removing learning opportunities, or changing staffing assumptions?</td>
	</tr>
	<tr>
		<td>**Scale**</td>
		<td>What new evidence would justify the next increment of investment?</td>
	</tr>
	<tr>
		<td>**Stop**</td>
		<td>What observable result would cause us to terminate the initiative?</td>
	</tr>

</table>

A leadership team unable to answer those questions does not yet have an adoption problem. It has an **evidence problem**.

### Decision reversals

Many sensible-sounding AI recommendations become wrong when underlying conditions change.

<table header-row="true">
	<tr>
		<td>Apparently sensible advice</td>
		<td>It is sensible when…</td>
		<td>Reverse the advice when…</td>
	</tr>
	<tr>
		<td>**“Give everyone an approved copilot.”**</td>
		<td>Valuable low-risk tasks are broad and recurring</td>
		<td>Benefits are concentrated in a few roles and unused licenses dominate economics</td>
	</tr>
	<tr>
		<td>**“Let teams experiment independently.”**</td>
		<td>Mistakes are reversible and information is non-sensitive</td>
		<td>Data exposure, external actions or consequential decisions appear</td>
	</tr>
	<tr>
		<td>**“Centralize AI adoption.”**</td>
		<td>Common security, procurement, evaluation and integration dominate</td>
		<td>Central approval becomes the bottleneck for highly contextual low-risk uses</td>
	</tr>
	<tr>
		<td>**“Train everyone.”**</td>
		<td>There are common behaviors everyone genuinely needs, including applicable literacy obligations</td>
		<td>Uses remain undefined and training becomes generic theater; prefer contextual just-in-time learning</td>
	</tr>
	<tr>
		<td>**“Keep a human in the loop.”**</td>
		<td>Human review can actually detect errors and reviewers have authority/capacity</td>
		<td>Review becomes rubber-stamping, cannot scale, or experts cannot reliably verify outputs. BCG's over-reliance result is the warning case. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)</td>
	</tr>
	<tr>
		<td>**“Scale the successful pilot.”**</td>
		<td>Tasks/users were representative and effects survive verification and cost</td>
		<td>Enthusiasts self-selected, task mix was cherry-picked, or behavior changes after rollout. [9](https://metr.org/blog/2026-02-24-uplift-update/)</td>
	</tr>
	<tr>
		<td>**“AI helps junior workers most.”**</td>
		<td>AI contains useful expertise they lack and output is verifiable, as in support and some coding contexts. [3](https://arxiv.org/abs/2304.11771)</td>
		<td>The model's knowledge is unreliable for the task or junior staff lack the ability to detect failures</td>
	</tr>
	<tr>
		<td>**“AI will make experts even faster.”**</td>
		<td>The tool removes genuine expert bottlenecks</td>
		<td>Interaction overhead exceeds assistance value; METR found exactly this for its experienced-developer sample. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)</td>
	</tr>
	<tr>
		<td>**“Automate after the copilot proves useful.”**</td>
		<td>Actions are bounded, repeatable and recoverable</td>
		<td>A copilot is useful precisely because human judgment resolves ambiguity</td>
	</tr>
	<tr>
		<td>**“Build a custom solution.”**</td>
		<td>Proprietary workflow/context/integration creates durable value</td>
		<td>Commodity products rapidly cover the need and maintenance becomes the dominant cost</td>
	</tr>
	<tr>
		<td>**“Standardize on one vendor.”**</td>
		<td>Integration and governance economies outweigh optionality</td>
		<td>Model capability changes quickly or the use portfolio requires materially different providers</td>
	</tr>
	<tr>
		<td>**“Use adoption rate as the KPI.”**</td>
		<td>Only as a diagnostic for discoverability/friction</td>
		<td>The organization begins forcing usage; adoption then measures compliance rather than value</td>
	</tr>
	<tr>
		<td>**“Scale because workers report large time savings.”**</td>
		<td>Self-report is corroborated by objective outcomes</td>
		<td>Objective evidence disagrees; METR found workers perceived sizable acceleration while measured completion became slower. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)</td>
	</tr>
	<tr>
		<td>**“Redesign the whole workflow immediately.”**</td>
		<td>Local evidence is strong and the workflow bottleneck is understood</td>
		<td>Task fit is still uncertain; preserve reversibility through a limited assistant/pilot first</td>
	</tr>
	<tr>
		<td>**“Wait until AI is more mature.”**</td>
		<td>Error cost and integration burden exceed current benefit</td>
		<td>Experiments are cheap, reversible and create decision-relevant learning now</td>
	</tr>

</table>

The deeper principle is that **governance intensity, organizational commitment and evidence burden should rise together**. The mistake is not decentralization or centralization; it is applying either indiscriminately.

## Claim-to-primary-source table

The table below separates the central decision claims from weaker market narratives and traces them to primary research or official sources.

<table header-row="true">
	<tr>
		<td>Decision-relevant claim</td>
		<td>Primary source</td>
		<td>Evidence type</td>
		<td>What the source actually establishes</td>
		<td>Important boundary</td>
	</tr>
	<tr>
		<td>GenAI can materially accelerate professional writing while increasing quality</td>
		<td>Noy & Zhang, *Science* / Stanford research record. [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)</td>
		<td>Randomized, preregistered experiment</td>
		<td>453 professionals; average completion time fell roughly 40%, evaluated output quality rose roughly 18%</td>
		<td>Selected occupational writing tasks, not whole jobs or firms</td>
	</tr>
	<tr>
		<td>GenAI can raise real-world customer-support productivity</td>
		<td>Brynjolfsson, Li & Raymond, *QJE*, “Generative AI at Work.” [3](https://arxiv.org/abs/2304.11771)</td>
		<td>Staggered field deployment / quasi-experimental evidence</td>
		<td>5,172 agents; roughly 15% more issues resolved per hour on average</td>
		<td>One organizational/work setting</td>
	</tr>
	<tr>
		<td>GenAI's effects differ substantially by worker skill/experience</td>
		<td>Brynjolfsson, Li & Raymond. [3](https://arxiv.org/abs/2304.11771)</td>
		<td>Field evidence</td>
		<td>Larger gains for less-experienced/lower-skill agents; small gains and some quality decline among top workers</td>
		<td>Does not prove novices always gain most</td>
	</tr>
	<tr>
		<td>Coding assistants can increase completed development work</td>
		<td>Cui et al., *Management Science*, 2026. [5](https://pubsonline.informs.org/doi/10.1287/mnsc.2025.00535)</td>
		<td>Three randomized field experiments</td>
		<td>Combined n=4,867; treatment increased completed tasks by 26.08%</td>
		<td>Specific assistant/work environments</td>
	</tr>
	<tr>
		<td>AI can also slow experienced developers</td>
		<td>METR randomized productivity study. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)</td>
		<td>Randomized field experiment</td>
		<td>16 experienced open-source developers, 246 real issues; early-2025 AI made completion roughly 19% slower</td>
		<td>Narrow sample and tool era; authors explicitly warn against broad generalization</td>
	</tr>
	<tr>
		<td>Self-reported productivity can disagree sharply with actual productivity</td>
		<td>METR. [8](https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/)</td>
		<td>Experimental measurement</td>
		<td>Developers believed AI made them about 20% faster despite measured slowdown</td>
		<td>Particularly strong warning against survey-only ROI</td>
	</tr>
	<tr>
		<td>AI has a “jagged” task capability frontier</td>
		<td>Dell’Acqua et al., *Organization Science*, 2026. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)</td>
		<td>Preregistered randomized field experiment at BCG</td>
		<td>AI improved performance on some realistic consulting tasks but could cause over-reliance and worse performance on tasks outside its frontier</td>
		<td>Frontier changes as models improve</td>
	</tr>
	<tr>
		<td>A productivity intervention can simultaneously create quality risk</td>
		<td>Dell’Acqua et al.; Brynjolfsson et al. [2](https://pubsonline.informs.org/doi/10.1287/orsc.2025.21838)</td>
		<td>Controlled/field evidence</td>
		<td>Speed/output and correctness/quality need not move together</td>
		<td>Requires task-specific quality definitions</td>
	</tr>
	<tr>
		<td>GenAI can partly substitute for complementary expertise during ideation</td>
		<td>Dell’Acqua et al., P&G “Cybernetic Teammate.” [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Preregistered randomized field experiment, 791 professionals</td>
		<td>Individual+AI performance could match human teams; AI reduced functional specialization differences</td>
		<td>Product ideation, not universal team substitution</td>
	</tr>
	<tr>
		<td>Better generation does not imply better judgment</td>
		<td>P&G experiment. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Randomized field evidence</td>
		<td>AI improved idea quality but did not comparably improve selection of the best ideas</td>
		<td>Particularly relevant to decision-support claims</td>
	</tr>
	<tr>
		<td>AI can improve short-run subjective work experience</td>
		<td>P&G experiment. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Experimental treatment with self-reported affect</td>
		<td>Positive emotions increased and negative emotions declined in AI conditions</td>
		<td>Does not establish retention, engagement or long-run well-being</td>
	</tr>
	<tr>
		<td>One-hour AI training was part of a successful intervention, but its causal necessity is unknown</td>
		<td>P&G study design. [6](https://pubsonline.informs.org/doi/10.1287/orsc.2025.20702)</td>
		<td>Experimental protocol</td>
		<td>AI participants received training/prompt guidance</td>
		<td>Training itself was not independently randomized</td>
	</tr>
	<tr>
		<td>Later AI-productivity measurement can be distorted by worker/task selection</td>
		<td>METR 2026 update. [9](https://metr.org/blog/2026-02-24-uplift-update/)</td>
		<td>Methodological update from continuing field study</td>
		<td>Willingness to work without AI, task selection and parallel agent use complicated causal estimation</td>
		<td>Highlights a measurement issue rather than estimating universal impact</td>
	</tr>
	<tr>
		<td>EU providers/deployers have an AI-literacy obligation</td>
		<td>EU AI Act Article 4, official AI Act Service Desk. [4](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-4)</td>
		<td>Binding regulation / official text</td>
		<td>Organizations must take measures supporting sufficient contextual AI literacy</td>
		<td>“Sufficient” is context-dependent; not a mandate for one standardized course</td>
	</tr>
	<tr>
		<td>EU high-risk AI deployers have stronger operational obligations</td>
		<td>AI Act Article 26. [12](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26)</td>
		<td>Binding regulation</td>
		<td>Includes competent human oversight, monitoring, certain logging and workplace information obligations</td>
		<td>Applies when the system/use is classified as high-risk</td>
	</tr>
	<tr>
		<td>High-risk workplace AI requires workers and representatives to be informed before use</td>
		<td>AI Act Article 26(7). [12](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26)</td>
		<td>Binding regulation</td>
		<td>Explicit workplace information obligation for high-risk AI</td>
		<td>Other national/EU labor duties may be separate</td>
	</tr>
	<tr>
		<td>AI-related personal-data processing remains subject to GDPR analysis</td>
		<td>EDPB Opinion 28/2024. [15](https://www.edpb.europa.eu/documents/opinion-of-the-board-art-64/opinion-282024-on-certain-data-protection-aspects-related-to_en)</td>
		<td>Official supervisory-board opinion</td>
		<td>Addresses legal basis, anonymity and processing of personal data in AI development/deployment</td>
		<td>Exact obligations depend on processing roles and facts</td>
	</tr>
	<tr>
		<td>NIST's GenAI Profile is a risk-management framework, not a legal mandate</td>
		<td>NIST AI RMF Generative AI Profile. [10](https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence)</td>
		<td>Official voluntary framework</td>
		<td>Provides GenAI-specific risk-management guidance</td>
		<td>Voluntary unless incorporated into contracts/rules elsewhere</td>
	</tr>

</table>

### Overall evidentiary judgment

The evidence now supports a proposition narrower—and more useful—than “GenAI makes companies productive”:

**Generative AI can generate substantial causal improvements in particular cognitive tasks and work settings. Those effects are highly heterogeneous across tasks, workers and human–AI configurations; objectively negative effects are possible; and evidence that these task gains systematically become firm-level revenue, profit or broad organizational performance remains substantially weaker.** [1](https://scale.stanford.edu/publications/experimental-evidence-productivity-effects-generative-artificial-intelligence)

Accordingly, the strongest leadership posture is neither “AI-first” nor “AI-resistant.” It is **evidence-first and portfolio-based**:

**decentralize discovery where consequences are low; centralize common controls and infrastructure where economies or risks justify it; test outcomes rather than enthusiasm; redesign workflows only after locating the real bottleneck; increase governance as consequences and autonomy increase; and treat stopping a weak use case as successful capital allocation rather than failed transformation.**