Classified programme, unclassified engagement - how the intake stage prevented the tool from ever touching the material

The buyer was a UK defence prime working on a Combat Air-adjacent programme. The programme itself carried a classification well above the general working environment of the firm's bid team. The bid team had been using a general-purpose commercial AI drafting tool on unclassified programmes for two years, and the executive team had noticed how much faster the drafting cycle had become. The pressure to just use the same tool on this one was constant.

The firm had no defensible way to demonstrate - to itself, to the prime's own security officer, or to the ultimate customer - that classified material would not pass through the general-purpose AI tool if the same drafting workflow was extended to this programme. The tool selection had already been made. The classification decision had been made second. Every mitigation from that point onwards was a patch on a foundation that could not be defended.

The engagement started by reversing the order. Classification was set at the intake stage as a hard field with a named accountable owner. The handling regime was derived from the classification as a lookup, not a judgement call. Only after these two fields were set did the workflow decide which drafting environment the material could enter. Material above the tool's authorisation ceiling never reached the tool.

The governed advantage on this engagement was operational, not architectural. The classification field was set by a named human at intake, not inferred by the tool. The handling regime was defined once and applied everywhere downstream. The audit line captured every routing decision, including the negative ones - the record of "this material was not sent to this tool" turned out to be as important to the security officer as the record of "this material was sent to this tool". The evidence library refused to accept a signature from a signatory whose clearance was not currently valid. The exit review from the prime's security officer confirmed that the tool selection was now defensible for the first time.

The engagement did not result in a new bid win, because no bid was in flight during the engagement window. The outcome the buyer valued was the operational envelope - the ability to run its bid team the same way on all programmes without the drafting tool being the deciding factor on which programmes it could touch. Six months after the engagement completed, the buyer reported that the intake discipline had held on three subsequent programme responses, and that its own security officer had used the audit line from the engagement's evidence library as a template for a wider governance review across the group.