Sample Artifact Library | Touch Stone Publishers
Before You Engage, Inspect the Work. These Samples Show the Structure and Standard of Every Touch Stone Deliverable.
These are illustrative examples — not client work product, not legal advice, not compliance certification, and not evidence of a completed client engagement. They show exactly what a board briefing agenda, decision-rights map, evidence register, role playbook excerpt, and lab output snapshot look like. Nothing is hidden behind a form.
Sample 01
Board briefing agenda.
| Time | Segment | Board question | Output |
|---|---|---|---|
| 0–10 min | Exposure framing | Where is AI already creating fiduciary, operational, or reputational exposure? | Shared exposure map |
| 10–25 min | Authority diagnosis | Who can approve, pause, escalate, or reject AI use by risk tier? | Initial decision-rights gap list |
| 25–40 min | Evidence standard | What record would show that oversight occurred before a problem became public? | Evidence register starter list |
| 40–55 min | Role implications | What must the board, CEO, GC, CFO, CISO, and compliance leader each own? | Role playbook pathway |
| 55–60 min | Next action | What should happen in the next 30 days? | Executive next-step memo |
Sample 02
Decision-rights map.
| AI use class | Approve | Pause | Escalate | Evidence owner |
|---|---|---|---|---|
| Low-risk productivity support | Business owner | Business owner | Function lead | Function lead |
| Customer-impacting automation | CEO delegate + legal/risk review | Risk or legal | CEO and general counsel | Risk leader |
| Regulated decision support | Executive committee | General counsel or risk chair | Board committee | Compliance leader |
| Autonomous consequential action | Board-defined authority only | GC, CISO, or board designee | Board committee | Named executive owner |
This is a sample structure. Actual authority design depends on the organization’s legal posture, operating model, risk appetite, and counsel review.
Sample 03
AI governance evidence register.
| Evidence artifact | Purpose | Owner | Review cadence |
|---|---|---|---|
| AI use inventory | Shows where AI is deployed, tested, or purchased. | CIO or AI program lead | Monthly |
| Risk classification record | Documents why an AI use was assigned to a risk tier. | Risk leader | At approval and material change |
| Human oversight control | Shows where human authority remains required. | Business owner | Quarterly |
| Exception and incident log | Tracks overrides, drift, failures, and escalation events. | CISO or risk leader | Monthly and post-incident |
| Board reporting packet | Summarizes risk movement, open exceptions, and governance decisions. | General counsel or board liaison | Quarterly |
Sample 04
Role playbook excerpt.
General counsel prompt
Before the next AI approval, ask: where does the record show who had authority, what risk tier was assigned, what evidence was reviewed, and who can pause the system?
CFO prompt
Before funding expansion, ask: what AI value claim is being made, what metric proves it, what downside exposure exists, and who owns the variance?
CISO prompt
Before deployment, ask: what data does the system touch, what access path exists, what red-team or control evidence exists, and what triggers shutdown?
Board director prompt
Before relying on management assurance, ask: what system of reporting exists, what red flags are tracked, and when does this return to the board?
Sample 05
Executive lab output snapshot.
Issue register
Open governance questions, decision bottlenecks, unclear owners, missing evidence, and escalation risks surfaced during the working session — documented, owned, and sequenced for resolution.
Operating map
A draft flow connecting board oversight, executive authority, legal review, risk controls, security review, and business ownership — specific to the organization, not a template.
30-day sequence
Immediate actions to assign owners, stabilize evidence, clarify decision rights, and prepare the next governance review — with named owners and no ambiguity about who does what first.
Take it with you
The complete sample packet in one PDF.
All five sample artifacts — board briefing agenda, decision-rights map, AI governance evidence register, role prompts, and lab output snapshot — in a single downloadable packet.
The packet is illustrative, not client work product, legal advice, compliance certification, or proof of a completed client engagement.