← THE PORTAL
THE PORTAL · ROADMAP

Not a rollout. A gated readiness path.

A rollout ships features on a calendar. A readiness path advances only when a gate proves it is safe to. The first 12–18 months prove Finance can run governed AI-native workflows across cash, spend, and trust – while building reusable architecture, data, control, evidence, and benefits-validation capability.
The question is never simply “what’s next.” It is “what has earned the right to be next.” Every advance below sits behind a gate that must pass first.
01 · THE CRITICAL PATH

Readiness, sequenced – each step earns the next.

The path is causal, not calendar-driven. Nothing here is a feature to ship; each step is a precondition for the one below it.
01
Adopt service classes, maturity gates, and first-wave MVA
The governing decision: agree how work is classified and what each maturity level requires, before anything is built.
02
Approve runtime, identity, tool, connector, and data allowed-use patterns
The architecture patterns every later workflow will inherit – decided once, up front.
03
Validate first-wave ownership and data access
Confirm who owns each workflow and that the data it needs is reachable and permissioned.
04
Create first-wave data products and metric definitions
Define DSO, spend, revenue-evidence, and benefits metrics on certified, source-linked data.
05
Create the calculation registry and first-wave calculations
Governed Finance math lives in registered, versioned services – never in an agent.
06
Establish evidence, source-linking, and logging
Every output carries lineage and every action is logged, from the first pilot forward.
07
Establish workflow / action tracking and the support model
Work becomes managed and traceable, with a support path before production, not after.
08
Run bounded pilotsGATE
First live workflows, deliberately narrow – cash, spend, and trust testbeds only.
09
Measure quality, review burden, action closure, evidence completeness, and claim quality
The pilot is judged on evidence, not enthusiasm – these are the readiness signals.
10
Decide Level 3 production readiness for DSO / vendorDECISION
A leadership call, made on measured signals – productionize only if the gates pass.
11
Decide the controlled evidence-support path for revenue controls; expand only where gates passDECISION
Revenue controls stay low-autonomy unless explicitly approved. Expansion follows proof, not ambition.
02 · THE GATED TIMELINE

The gates are the roadmap. The phases just wait on them.

Six windows over 12–18 months – but the windows are not the story. Between each sits a gate: a named set of conditions that must pass before anything advances. Nothing flows past an unpassed gate.
READINESS
decisions before build
0–3 MONTHS
foundation & pilot readiness
3–6 MONTHS
bounded pilots & architecture proof
6–12 MONTHS
productionize where gates pass
12–18 MONTHS
scale & gated expansion
LATER
conditional only
Before Pilot
runtime – identity – tools – connectors – allowed data use
Before Production
workflow platform – evidence pattern – semantic layer – retention – support
Before Controlled Workflows
calculation & write-back policy – security monitoring – control signoff
Before External Reporting
auditor boundary – disclosure architecture – Level-4 certification – Controller review
Before Scale
platform strategy – cost model – scaled operations
Each blue gate holds the track until its conditions are met – readiness, proven, not scheduled.
↔ scroll the track
03 · THE SEVEN WORKSTREAMS

Seven lanes, one timeline, every lane through every gate.

The work runs in seven parallel streams. Each advances through the same phases in lockstep – none races ahead of the gates. Read a lane left-to-right to follow one workstream through time, or a column top-to-bottom to see everything a single phase demands.
Workstream
READINESS
0–3 MO
3–6 MO
6–12 MO
12–18 MO
LATER
Architecture foundations
adopt service classes, maturity gates, first-wave MVA
approve runtime, identity, tool, connector, data allowed-use & trust-boundary patterns
stand up pilot components and logging
harden production architecture for selected workflows
scale reusable components where gates pass
Level 6 platform decisions
Data / metrics / calculations
confirm data-product contract & metric governance
discover first-wave data; define DSO, spend, revenue-evidence, benefits metrics
build first-wave data products & calculation registry
expand semantic catalog & calculation testing
add cloud, ARR, pricing, forecast, close metrics where gates pass
external reporting, tax, payroll, statutory certification
Agent / workflow / evidence
adopt read-only-first & human-approval principles
define agent/workflow registries & evidence-metadata pattern
pilot agent-prepared packets, action tracking, source-linked evidence
move selected workflows toward Level 3 or controlled evidence support
expand workflow/action tracking to selected domains
semi-autonomous monitoring only after Level 5 gates
Security / controls / operations
confirm no approval is assumed
security/control review, non-prod data strategy, incident path, support design
monitor pilot logs, incidents, access, evidence, review burden
production support, SoD review, retention, runbooks, DLP where needed
mature monitoring, cost telemetry, access reviews, service classes
audit-sensitive & sensitive-data scale only after approvals
First-wave testbeds
confirm DSO, vendor spend, revenue-controls evidence as first-wave ground
charter pilots; validate ownership & data
run bounded pilots
productionize DSO/vendor only if gates pass; revenue controls stay low-autonomy
expand proven patterns
do not treat first wave as the full vision
Benefits validation
adopt value taxonomy & claim rules
define baseline, action, evidence, claim-log standards
track learning, operational, financial/control metrics
review, downgrade, reject, or approve claims
mature benefits cadence; apply to expansion
no broad value narrative without validated claims
Change management / adoption
define leadership reinforcement & adoption rules
train pilot users and reviewers
track adoption, review burden, bypass behavior
retire duplicate side channels where gates pass
expand role-based training
avoid optional side-channel workflows
Each lane advances left-to-right through the same phases · italic = later / conditional · none races ahead of the gates
04 · THE PROVING GROUND

Three testbeds. Not the full vision – the proof of it.

The first wave is deliberately narrow: three disciplines chosen because each has a clear owner, reachable data, and a measurable outcome. They prove the pattern; they are not the destination.
CASH
DSO & collections
Cash risk surfaced as it forms, routed to an owner, validated against cash that actually arrived. The clearest owner, the most reachable data.
GATE – productionize toward Level 3 only where identity, evidence, and control gates pass.
SPEND
Vendor & software spend
Renewal overpayment, under-utilization, and drift surfaced before lock-in, routed to the budget owner who can act.
GATE – productionize toward Level 3 only where ownership and data-access gates pass.
TRUST
Revenue controls evidence
Control evidence assembled continuously, source-linked, audit-ready by construction – the trust discipline of the three.
GATE – stays low-autonomy evidence-support unless explicitly approved – no audit reliance claimed.
05 · THE DISCIPLINE

What this roadmap does not yet claim.

The credibility of the path rests on what it refuses to assert ahead of proof. These are not omissions – they are the discipline.
Not claimed at this stage
×Implementation readiness
×Business-case approval
×Security, SOX, audit, or control acceptance
×External auditor reliance
×Realized value
×Headcount reduction
×Autonomous Finance decisions
×Agent-owned governed Finance math
×Finance execution ownership for co-owned value pools
What we are asking leadership to decide
01
Whether to approve the testbed-led roadmap option over a use-case rollout.
02
Whether the first-wave MVA is sufficient – and not overbuilt.
03
Whether security and control gates are mandatory for maturity progression.
04
Which role types own workflow, data, calculations, agents, benefits validation, and support.
05
Whether CFO co-owned expansion proceeds only with explicit business-owner sponsorship.
A target-state readiness path – outside-in, illustrative
Gated readiness – nothing advances until its gate passes – subject to validation