The Missing Layer in Infrastructure & Public Sector AI
Ludmila Pirogova
Managing Partner | NXTFrontier
ISO 42001 Lead Auditor
ISO 55000 Committee Member
PhD Research · CPA · EMBA
AI Decision Architecture
Auditability · Accountability · Exposure
Before procurement asks.
Before regulators arrive.
Before it's too late
When AI enters decisions measured in decades and hundreds of millions — accountability cannot be retrospective
It must be designed before the commitment hardens.
Before the inquiry begins.
Before the pressure arrives.
The Gap Nobody Named
Most organizations deploying AI in infrastructure, capital programs, and public institutions have already crossed the threshold where the technology works.
Not in the technology. Not in the data. Not in the model.
In the layer between what the AI produces and what the organization can defensibly do with it.
That layer cannot be designed retrospectively. It cannot be produced after the parliamentary question, the FOI request, the failed PPP negotiation, or the audit finding.
The Four Moments Nobody Prepares For
Every infrastructure authority, capital program, and public institution eventually reaches one of these. Most reach all four. None of them announce themselves in advance.
The Auditor General Question
The AI recommended. Someone acted. The auditor general is now asking who decided.
Pressure Dent in Oversight
The pressure compressed the timeline. The oversight did not survive it.
Stakeholder Inquiry Risk
The counterparty asked before the regulator did.
Accountability Nobody Approved
The organization approved the AI. Nobody approved the accountability.
The AI recommended. Someone acted.
The auditor general is now asking who decided.
Decision authority has a heavy weight
Not who ran the model. Who decided to act on its recommendation.
What authority they held — documented, delegated, or assumed. What alternatives were considered. What was logged.
Infrastructure programs and public institutions -
Here this question carries a specific gravity that private sector governance frameworks were never designed to absorb.
The consequence is a parliamentary committee. An auditor general report.
A freedom of information request that surfaces the absence of a documented human decision behind an AI recommendation.
The gap is never in the technology
It is in the authority structure nobody designed around it — because everyone assumed someone else had, or because the political environment made the question uncomfortable to ask before the commitment hardened.
In Canada
Treasury Board Directive on Automated Decision-Making · Ontario Bill 194 · Quebec Law 25
In the US
OMB Circular A-130 · NIST AI RMF · GAO AI Accountability Oversight · Federal AI Investment: $5.6B (2022–2024)
In the EU
EU AI Act · Public administration AI classified high-risk from December 2027
In Australia
National AI Strategy 2025 · Privacy and Other Legislation Amendment Act (automated decisions, December 2026)
The Pressure Compressed the Timeline.
The Oversight did not Survive it.
Who decided?
Under operational stress, AI systems get pushed harder and faster than the oversight architecture was built to handle. The result is speed without enough room for review.
What authority did they have?
The checkpoint disappears under deadline. Authority gets bypassed by urgency, and the evidence trail never gets logged because there was no time.
What records were kept?
The organizations that hold together under pressure are the ones that designed decision accountability before the pressure arrived. When the timeline compresses, someone still knows who owns the call, what authority they have, and what must be logged.
The Counterparty Asked Before the Regulator Did
The first accountability question in infrastructure and public sector AI is not coming from the regulator. It is coming from the party across the table who needs to know, before they sign, before they commit capital, before they proceed — whether someone was watching and whether that can be proven.
The Private Sector Partner
The private sector counterparty flagged the due diligence gap.
The Institutional Investor
The institutional investor asked which AI-influenced capital decisions were documented and who owned the recommendation.
The Insurer
The insurer rewrote the professional indemnity clause to exclude AI-derived judgment without documented human oversight.
The Vendor
The vendor on the other side of your procurement — the one your AI system scored and ranked — challenged the decision trail.
Grant Thornton 2026: 78% of senior leaders cannot pass an independent AI governance audit in 90 days. Open Contracting Partnership 2025: AI is entering public procurement through side doors — pilots, grants, embedded features — with no accountability trail.
Organization Approved AI. Nobody Approved the Accountability.
Public Institutions
The system went through procurement, legal, IT, and sign-off. Six months later it's influencing program delivery and public investment — and nobody designed who owns what it recommends when something goes wrong.
Capital Program Authorities
The digital twin is running. The procurement scoring is producing rankings. The board approved the technology budget. Nobody approved the decision architecture around it.
Public-Private Partnership Teams
The vendor passed. The pilot delivered. Then the counterparty's risk committee asked one question the champion couldn't answer: who has documented authority to act on the AI's output, and what evidence exists that they did?
Designed for the real world
Decisions in public institutions are not made in a vacuum. They are made in political environments where budget cycles, ministerial priorities, procurement timelines, and operational realities that have nothing to do with the framework on paper converge simultaneously.
AI Decision architecture that ignores this does not get used. Ours is designed for the world that actually exists.
One session. One decision. One clear output.
Designed to fit within the authority of the person in the room — not require the approval of everyone above them.
Decisions That Carry Public Accountability
If your AI is influencing decisions that carry public accountability — this is where you start.
North America - US federal
- OMB Circular A-130 · NIST AI RMF
- GAO federal AI accountability oversight
North America - Canada
- Treasury Board Directive on Automated Decision-Making
- Ontario Bill 194 — public sector AI accountability
- Quebec Law 25 — automated decision transparency
Asia-Pacific
- Australia National AI Plan 2025
- Australia Privacy Amendment Act — December 2026
- Singapore IMDA Agentic AI Framework 2026
- Japan AI Promotion Act — May 2025
Europe
- EU AI Act — public administration AI, December 2027
- GDPR — automated decision documentation
Standards
- ISO 42001 AI Management Systems
- ISO 55001 · ISO 55014
The Document Your Auditor General, Counterparty, and Board Can Actually Use
Not a framework document. Not a policy review. A signed professional opinion — scoped, structured, and issued under NDA — that your procurement oversight is defensible to your auditor, your counterparty, and your board.
We know that decisions are not made in frameworks. They are made in rooms where political reality, budget cycles, and career consequences converge. The architecture we design accounts for that room.
The Practice Behind the Assessment
Ludmila Pirogova · Managing Partner, NXTFrontier Group
One of the few practitioners globally working as a certified AI Management Systems Lead Auditor, Asset Management ISO Committee member, with 20+ years of delivery in capital-intensive, politically complex environments.
Built at the point where standards are written and tested where they are applied.
ISO/IEC 42001 Certified Lead Auditor
The only credential that allows production of a signed Procurement Readiness Assessment for enterprise AI adoption. Reduces friction in vendor qualification, executive approval, and regulatory disclosure.
ISO 55001-anchored Guidance
Asset management and enterprise portfolio derisking. Human oversight must be designed before commitments harden.
CPA, EMBA, PhD Research in Math & ComSci
Capital investment oversight for financial and stakeholder value.
Vector Applied AI Institute FastLane Cohort
AI frontier architecture and enablement for trusted AI scale.
When AI Decisions Become Material
Contact Us | SubStack | LinkedIn | The Scale Gap
© 2026 NXTFrontier · ISO 42001 Lead Auditor · AI Management Systems · ISO 55000 / TC 251 Committee · Asset Management
All rights reserved
AI Decision Architecture for Infrastructure, Capital Programs & Public Institutions