Skip to content
Home NSCP Token Economics Demos Research NightClaw
TokenArch icon
TokenArch

AI Is Outpacing the Governance
to Support It

Research and open-source tools exploring what it actually takes to run AI in production — governance frameworks, agent architecture, and the systems that make autonomous operation trustworthy. Everything here was researched and built using a combination of AI tools and orchestration.

Open Source · 24/7 Agent OS
NightClaw for OpenClaw

An autonomous overnight agent operating system — two permanent crons, per-project phase lifecycle with verifiable milestones, indexed failure recovery, and a morning briefing. No daemon. No database. Drop a folder into your OpenClaw workspace and set it running.

View project → github.com/ChrisTimpe
Explore the research

The Numbers That Keep Coming Up

These four data points kept surfacing across every angle of the research.

0%

of enterprise generative AI pilots fail to deliver measurable P&L impact. The gap between deployment and business value remains the central challenge.

MIT Project NANDA (2025)

0%

of AI value comes from rethinking the people component, per BCG's 10/20/70 framework. Only 10% from algorithms, 20% from technology and data.

BCG 10/20/70 Framework (2026)

0%

of data practitioners say their data is not clean or reliable enough for AI use cases. AI does not solve the data quality gap — it exposes it.

Modern Data Report 2026

of agentic AI projects will be canceled by 2027 due to governance failures. Without cost visibility and audit trails, organizations cannot distinguish working AI from expensive experiments.

Gartner via Reuters (2025)

Three Patterns Worth Understanding

These aren't predictions. They're structural conditions that showed up consistently across 20 research files and 100+ sources.

Architecture

The Connection Layer Is Being Solved

MCP is under the Linux Foundation. OpenClaw has 250K GitHub stars and argues you don't need a protocol at all — just give the agent a shell. The debate is real, but the point is the same: how agents connect to tools is getting standardized in the open. 57% of organizations already have agents in production. This part is moving.

57% agents in prod MCP + CLI debate 84% dev adoption
Architecture & Technical research
Trust

The Trust Layer Doesn’t Exist Yet

When an agent calls a tool — whether through MCP or CLI — nothing in the protocol tracks why, under whose authority, or whether it complied. Every hop is stateless from a trust perspective. OWASP AOS, Galileo Agent Control, and NVIDIA NemoClaw are building around this gap, but there's no ratified standard. Think of it this way: MCP is like TCP/IP — it moves messages. The TLS equivalent, the thing that makes the interaction verifiable, hasn't been built yet.

No trust standard 98% shadow AI OWASP AOS draft
Cybersecurity & AI Security research
Controls

Everyone Is Building It Themselves

Without a standard, every vendor builds proprietary governance — Oracle, SAP, Salesforce, NVIDIA. Open alternatives are forming (Galileo Agent Control, FINOS Common Controls, OWASP AOS) but none are mature enough to depend on. The NSCP demo on this site is my version of the same thing — the governance pattern built by hand using traditional data engineering, so you can see what the controls actually look like.

NemoClaw α Galileo Agent Control FINOS FS controls
Consolidation & Economics research

What I Built

20 Sourced Research Files

Research Observatory

Active

My research notes — structured as markdown with YAML metadata so they're useful to both humans and AI tools. 20 files covering the AI landscape, architecture trends, cybersecurity, financial services, and consolidation economics. Every claim is sourced. Every source is credibility-rated.

20 Files 7 Categories Tier-1 Sources

human@tokenarch.com · Chris — 15 years in finance BI, data engineering, and enterprise systems