What Should AI Trust About Your Organization?

MAKING AI WORK | ARTICLE 3 OF 6

Access allows AI to reach organizational information. Trust determines how it interprets that information, which sources govern a decision and what it should do when the enterprise disagrees with itself.

1
USE
2
ALLOW
3
ANCHOR
4
RUN
5
COST
6
CAPABILITY

YOU ARE HERE: Anchor: establishing the sources and organizational context intelligent systems should trust.

Say a manager asks whether an employee’s pay is low compared with peers. An intelligent system finds people with similar titles who are paid more and lays out a clean comparison. The numbers might be perfectly correct, and the conclusion could still ignore geography, job level, compensation structure, or an approved change that hasn’t taken effect yet. It might even surface a comparison that manager was never entitled to see in the first place.

The problem here isn’t necessarily bad information. It’s information interpreted without the organizational context that actually gives it meaning. A more capable model just produces a more sophisticated version of the same mistake. You end up with something that’s factually accurate and organizationally wrong at the same time.

The previous article made the case that technical capability isn’t the same thing as organizational permission. Putting that permission into practice raises another question: what should the system actually trust about the organization? It needs to know which sources govern which questions, how people and responsibilities relate to each other, which version of the information applies, and what to do when the evidence contradicts itself.

An AI system can reach every relevant source and still misunderstand the organization.

Access does not establish understanding

An enterprise AI capability might draw on customer records, delivery information, financial data, support activity, meeting notes, and recent communications. Historically, it was experienced people who supplied the interpretation between all of those sources. They knew which record actually governed a particular question, which document was stale, and which offhand comment deserved attention without being treated as established fact.

Take an account-health assessment. The commercial record says the opportunity is progressing. Delivery data shows delay. Support volume has climbed, and recent notes reveal frustration. Meanwhile, a three-week-old presentation still calls the account green. These sources aren’t necessarily describing the same reality, and you can’t resolve the differences just by picking whichever one is newest or most detailed.

Connecting an agent to all of them expands the evidence available. It doesn’t tell the agent how to interpret that evidence. An organization can’t expect the model to invent, on its own, the distinctions between formal status, contextual signals, and judgments that still need a person to review them. Those distinctions have to be designed in. Connectivity alone won’t produce them.

Different sources govern different questions

The idea of a “single source of truth” is useful right up until it implies one platform should settle every disagreement. Organizational authority is usually spread across domains. A CRM platform might govern opportunity structure, an ERP system might govern posted revenue, and Workday might govern employment status, management relationships, or compensation. An executed agreement governs the contractual commitments themselves, not whatever presentation happens to describe them.

Each source has authority over specific questions, not over the enterprise in some abstract sense. A forecast can be newer than posted financial information without ever becoming actual revenue. A manager’s spreadsheet might hold useful planning assumptions without establishing an approved position. Treat both sources as equally authoritative, and you lose the exact distinction the decision depends on.

So the real task is defining the relationship between a question and the source that can legitimately answer it. That’s what Anchor means in this series. An anchor isn’t just where information happens to be stored. It’s the organizational context that explains what a source represents, where its authority applies, and how it should shape reasoning.

The system needs a model of the organization

Source authority alone isn’t enough. The capability also needs to know who’s asking, who the information concerns, how those people relate to each other, and which legal entity, business unit, or customer relationship is involved. The exact same information can call for a completely different interpretation once the surrounding relationship changes. Without that frame, the system can assemble perfectly accurate facts around entirely the wrong question.

Identity, role, and security are what make those distinctions actually work day to day. A manager, an HR business partner, and a compensation specialist can each have a legitimate but different view of the same situation. Just because they share access to some common information doesn’t mean they should get the same conclusion, or be allowed to authorize the same response. Anchor supplies the context needed to apply the boundaries Allow already established.

Policy and process add another layer on top of that. The system needs to understand which rules apply, what counts as an approved action, and which conditions change the route the work takes. Put identity, relationships, decision rights, and governing information together, and a general-purpose model can actually participate in a specific organization instead of just generating plausible-sounding language about it.

Workday provides more than records to retrieve

This is why an enterprise platform’s value can’t be reduced to its interface. People may end up spending less time navigating screens as intelligent capabilities assemble information and initiate work on their own. That doesn’t make the organizational structure sitting beneath those screens any less important. It supplies part of the context the intelligent system needs to actually understand the work.

Workday represents workers, organizations, positions, management relationships, roles, security, business processes, approvals, and effective-dated changes. Those aren’t just fields an agent can retrieve or transactions it can execute. They describe real relationships between people, responsibilities, and authorized activity. Used well, that context is what separates an answer that merely sounds reasonable from one that actually fits the organization.

Other platforms fill in different parts of the picture. Customer platforms represent commercial relationships and ownership. Financial systems represent financial structures and transactions. Identity platforms establish who a person is and how they authenticate. Workday isn’t the universal authority for every domain out there. Its value comes from the organizational context it contributes, and from preserving that context as intelligence moves across systems.

Useful context is not the same as governing information

Formal records simply can’t capture every signal that matters. Sales notes might reveal customer frustration without ever touching the contractual terms. A manager’s promotion note can explain an expectation without changing an employee’s official status. A project leader’s narrative might flag emerging risk well before the formal metrics move. These sources are valuable precisely because they describe something the system of record hasn’t caught up to yet.

Restrict intelligence to formal records only, and you strip away much of its ability to recognize weak signals and read changing circumstances. But let every contextual source govern the answer, and you create a different problem entirely. An opinion, a draft, or a stray meeting note can quietly become organizational truth just because it helps the model tell a more coherent story.

A dependable capability needs to hold both roles at once. It can say the authoritative system records one state while recent contextual evidence points to a material change. That kind of disagreement can direct attention, prompt validation, or support a recommendation to update the record. What it shouldn’t do is quietly swap in its own interpretation for the formal state, or ignore credible evidence just because nobody’s run it through a formal process yet.

Disagreement should remain visible

Organizations are full of conflicting information, that’s just the reality. Systems lag behind, policies change, local workarounds stick around, and superseded documents remain perfectly searchable. Experienced employees compensate by interpreting the disagreement themselves. An intelligent system can actually hide that disagreement by turning fragmented evidence into a smooth, confident-sounding answer, even when nobody has settled which source should govern.

That’s why trust requires provenance: enough visibility to see which sources actually influenced the conclusion, which ones were treated as authoritative, how current they were, and where real conflict still remained. The point isn’t just to tack references onto an answer. It’s to make the reasoning behind that answer clear enough that someone can actually push back on it.

Sometimes the right result is a qualified conclusion, or just a request for confirmation. In consequential work, the system may need to stop rather than infer its way through an unresolved conflict. A source hierarchy should help it tell genuine disagreement apart from different perspectives on the same situation. It shouldn’t become a reason to bury evidence that’s just inconvenient.

A coherent answer is not the same as a resolved conflict.

The right source can describe the wrong moment

Organizational truth also shifts over time. A worker changes managers, a policy gets replaced, a customer signs a new agreement, or an approved transaction doesn’t take effect until next month. Finding the right source is only half the problem. The system also has to figure out which version applies to this decision and when it actually becomes valid.

An old document isn’t necessarily wrong. It may have accurately described the organization when it was written and still be the wrong basis for a decision today. In the same way, a future approved change shouldn’t automatically get treated as the current state. Without effective dates, version information, and publication status, perfectly valid sources can get combined into a conclusion that’s no longer valid, or isn’t valid yet.

Effective dating, version control, records management, and maintained knowledge already handle these distinctions today. AI just raises the stakes, because information can now influence a decision well outside the application where its original controls were ever visible. The real question isn’t just whether a source is current. It’s whether it describes the organizational state this particular decision actually requires.

Trust can be federated

None of this requires one central AI platform to contain the whole organization. Different capabilities need different combinations of authoritative and contextual sources. A sales capability might need customer, contract, delivery and financial information. An HR capability might need Workday, identity, and approved policy. The design should preserve the role of each source rather than pretend everything becomes equivalent the moment it’s connected.

So the anchor itself can be federated, distributed across systems whose authority is clearly defined and understood. Source authority, identity, security, provenance, and effective dates all need to stay available to whatever capability is using the information. A connection on its own can’t tell the system which question a source is actually entitled to settle.

Integration patterns like the Model Context Protocol (MCP) and agent-to-agent interaction can make it easier for intelligent systems to use information and capabilities across platforms. What they don’t do is determine organizational authority. The architectural question is still what each connected system is authoritative for, and how that authority should shape reasoning and action.

Weak foundations become operational problems

Organizations have gotten away with imperfect foundational information for years because people quietly compensate for it. A manager knows the org chart is wrong. HR knows a job profile is stale. Finance knows which cost center actually gets used. Those corrections usually stay implicit in how people work rather than becoming maintained organizational knowledge anyone else can see.

Once intelligent systems start influencing decisions or actions, that weakness stops being harmless and becomes an operational problem. An incorrect management relationship can route information to the wrong person. A stale role can grant inappropriate access. A weak customer hierarchy can distort a commercial conclusion. AI can faithfully reproduce the formal record while completely missing the correction experienced people have been making for years.

The answer isn’t to put AI on hold until every information problem gets solved. It’s to identify the foundations a particular capability actually depends on and make those dependable enough for the job at hand. Identity, relationships, source ownership, security, and effective dates deserve to be treated as operating infrastructure, not background data issues someone will get around to eventually.

Make trust explicit enough to challenge

Before a material capability starts influencing work, leadership should be able to explain which sources govern its decisions and what organizational context is needed to interpret them. It should be clear which information is authoritative, which is just contextual, and which shouldn’t govern the answer at all. The design also needs a defined response to conflicting evidence: when to prefer a source, when to expose the disagreement, when to seek confirmation, and when to simply stop.

That explanation has to account for time and provenance too. The organization should know how the capability tells current state apart from historical or future information, and it should be able to say why particular sources influenced a given conclusion. None of this demands a universal hierarchy covering every possible question. It’s just the minimum clarity needed to understand, challenge, and improve the trust placed in this capability.

From general intelligence to organizational intelligence

A general-purpose model can know a great deal about the world at large. An enterprise capability needs something different: a dependable understanding of this organization specifically. Who people are, how authority actually works, which sources govern which questions, and what happens when the organization’s own evidence contradicts itself. That understanding is what turns access to information into genuinely useful organizational intelligence.

Interfaces and workflows will keep changing, but identity, structure, source authority, security, time, and provenance stay foundational. They let intelligence interpret context without inventing organizational truth, and surface uncertainty without dressing it up as confidence. The more fluid intelligence becomes, the more deliberate its anchor has to be.

MAKING AI WORK

1
USE
2
ALLOW
3
ANCHOR
4
RUN
5
COST
6
CAPABILITY

YOU ARE HERE: Anchor: defining authoritative sources, organizational context, provenance and the handling of conflict and time.

Use identified worthwhile work. Allow established machine authority. Anchor provides the organizational context needed to apply it. The next challenge is keeping that context, and the capability itself, dependable as the organization changes.

NEXT | ARTICLE 4 OF 6

Your Agent Worked in the Demo. Now What?

The next article examines ownership, maintained knowledge and permissions, behavioral testing, monitoring, change, incident response and eventual retirement.