AI Governance · Risk · Compliance
Builds the systems. Governs the systems. Defends the evidence.
The rare operator at the intersection of DoW program execution, ISO/IEC 42001 & 27001 audit leadership, and hands-on GenAI engineering. I don’t just write the AI policy — I ship the governance software that enforces it and the evidence trail that survives the audit.
Track record, in numbers
Why the bridge is rare
Most AI-governance candidates can do one of these. The value is in holding all three at once — and having the federal program scars to know what a control actually costs.
Builds
The systems
Hands-on GenAI and agentic engineering — governed multi-agent frameworks, a live governance platform, and a software factory. Practitioner depth, not vendor slideware.
Governs
The systems
ISO/IEC 42001 / 27001 / 27701 Lead Auditor directing a corporate AIMS toward certification. Translates EU AI Act, NIST AI RMF, and RMF mandates into executable controls.
Defends
The evidence
22 ATO campaigns, an 82% first-pass rate, and a nine-figure DoW portfolio briefed to the C-suite. Governance that holds up when an auditor — or a federal sponsor — pushes back.
The proof stack
Working systems and a published playbook — architecture, controls, and the evidence behind them. The credential is the artifact, not the claim.
Lliam-GOV
An agentic LLM assistant where autonomy stays accountable. Seven enforced controls — encryption at rest, a hash-chained append-only audit log, default-deny egress allowlist, a human-approval gate on self-modification, capability isolation, CUI handling, and auditor-ready evidence export — each crosswalked to ISO/IEC 42001 and the NIST AI RMF.
See the case study →
DoW AI PM Builder
A single-repo template that instantiates a governed AI software factory: 15 accountable agents with a Security & Compliance Officer in every phase gate, 156 capability packages each mapped to an accountable owner, and CPMAI / ISO 42001 / NIST AI RMF baked into the operating model. The repository audits itself — control matrix, Statement of Applicability, and CI re-verification on every push. Public on GitHub.
See the case study →
The Decisions That Come Before Scale
The AI-lifecycle governance playbook — the decisions teams must make before they scale AI in regulated environments. Grounded in CPMAI, ISO/IEC 42001, NIST AI RMF, and DoW frameworks.
Download free →
Read the thinking the software is built on.