Armakuni Book a working session

Our FDEs deliver business outcomes within 90 days

Forward deployed engineers (FDEs) work with your team to build and deliver real business outcomes with the power of AI.

  • What you getAn FDE team of 5 to 7, with accelerators we've already built.
  • How you payGo or stop at week 4, on a scorecard you sign. After that, we're paid on the result.
  • What happens nextA workshop and a pilot on what matters most.

That's what AI did out there. Imagine it inside your business.

Here is what six of your teams could be saying once AI agents are doing real work for them, from refunds settled at 3 a.m. to the oldest code changed every week.

CS
Customer serviceDraft · not posted yet

DraftPostNot live yet. It's still a pilot.

So why is so little of it live inside companies?

People who see more enterprise AI than almost anyone said why. Here are their own words. And when an AI agent goes wrong, it goes wrong in public.

NA
Nikesh Arora@nikesharora · Chairman and CEO, Palo Alto Networks
On X, 1 July 2026 ↗
"Are there examples of organizations who have been able to demonstrate production level systems and do those developments show a return in lower cost, efficiency or better top line?"
"How will we discover, govern and stop agents if need be. Perhaps the biggest security concern ATM."

The questions customers asked him, after "north of 200 meetings in Europe with customers and technologists".

952532.4K1.3M
AL
Aaron Levie@levie · Co-founder and CEO, Box
On X, 30 May 2026 ↗15 July 2026 ↗
"Decisions, processes, and workflows often live in people's heads and tribal knowledge that need to get turned into unstructured data for agents."
"IT teams are finding increasing success embedding full engineers into the business functions (essentially internal FDE) that go and implement agents into the internal workflows."

On "effectively the #1 problem for AI agents in the enterprise", then after a dinner with IT leaders of large enterprises.

123122755188K
The riskThree incidents, each sourced and dated

AI agents now act on real systems. When one goes wrong, it's in public.

production level systemsNikesh Arora

Put it live, and show the return.

live in people's headsAaron Levie

Write down what your experts know.

it's in publicThree incidents

Make it safe.

That's what our FDEs do with AK AI Factory.

Here's everything it takes to get real business outcomes.

Week 7One stream waters every terrace. Each harvest is weighed against today’s number.

Point at a part and its things light up on the farm. Press a name under Who and that person waves. Press a stop on the line to move the season; the bead shows where it is. On the farm: press a gate, a trial bed, the wind pump, the irrigator, a crow, a tree, the bell, the hive, the hen; run the pointer through the field; point at the scale and each crate is traced back to its row; drag a cloud to make it rain. Any number is an example.

Who

Forward deployed engineers

An FDE team of 5 to 7, inside your company until it’s live. Together they cover Ground, Orchestrate and Prove, AWS’s three FDE pathways.

We partner with domain experts from your industry, who draft the rules your experts then check.

On your side: who signs the scorecard, who check the answers, and who pair with ours from week 1 and run it after hypercare.

We build the loop, the tests and the harness. AI agents get a lot done.

By day people decide. Your people and ours review the work and write down what’s next.

At night AI agents do the long hours in a safe copy, with only the tools they need, against a number to beat. Only what beats today reaches your team, and you approve what ships.

AI agents earn more freedom only with evidence, and lose it on a serious slip. How we work, not a measured result

How

AK AI Factory

Our method for building, checking and running AI work, set up in your own AWS account from week 1.

  • Every piece of work goes through the same jobs and checkpoints.

  • The jobs build the harness: everything around the AI model, from its tools and memory to its policy and evals.

  • It stays with you, so the next outcome starts from here.

On day one

Our accelerators

Parts we’ve already built, so the time goes on your outcomes.

Axiom gives every AI agent one meaning of your data:

  • your business terms in one catalogue;

  • each person’s access enforced by the data layer rather than the prompt;

  • every number traced back to its query.

Contact centres also get the Connect accelerators.

How you pay

The scorecard, and Guaranteed AI Outcomes

One page your owner signs by week 4: the outcome, the measure, today’s baseline and the target.

It’s the go-or-stop decision, and what our fee is measured against after that.

After it’s live

AK Run, if you want it

Your team runs it, or we do. AK Run looks after incidents, cost and drift, and keeps improving it. Its Agent ControlPlane keeps every AI agent behind one gate: approved models only, every call traced to a person, cost by team.

Thirteen weeks to live, on your go.

Weeks 1–3 · Agree

1 · Agree the outcome

We sit with the people who do the work and write down how they decide: the rules, the exceptions and what must never happen.

Answers "live in people's heads" · Aaron Levie

Week 4: your owner signs the scorecard. Go, or stop and keep everything we found.

The technical detail
  • Before anything is built, we write down how your business decides, and agree what good looks like.
  • FDEs sit with your experts and write a domain model: a map of how the business works and decides, with its rules, its exceptions and what must never happen.
  • AI can draft the model from your databases. But tables don't show why a refund gets approved, so your experts shape it and sign it off.
  • Your owner and our lead agree one scorecard: the outcome, how it's measured, today's baseline, the target and what counts as a failure. Your owner signs it by week 4.
  • Each AI agent we plan goes into a register, with an owner, the data it may see, the tools it may use and its limits.
  • From the map, we pick the workflows where AI makes the most difference. Week 4: go, or stop and keep what we found.
  • Why: A result nobody defined can't be proved.

Weeks 2–6 · Ground

2 · Know your business

Every AI agent gets one meaning of your data, through Axiom, and sees only what it's allowed to.

Answers "live in people's heads" · Aaron Levie

The technical detail
  • Every AI agent works from one meaning of your data, and sees only what it's allowed to.
  • Axiom, our accelerator, describes your data in business terms in one catalogue, on Amazon DataZone. A "customer" in sales and a "customer" in finance each get one agreed definition.
  • Who may see which rows and columns is enforced in the data layer, in AWS Lake Formation, and not left to the AI.
  • Most answers come from your documents, found at the moment someone asks. That usually goes wrong on permissions, not on search. So the asker's identity travels with the request, and the index filters before anything is retrieved.
  • Finding and answering are scored separately, so you know which one failed. When sources disagree, a named owner decides which is right.
  • Every query is logged, and a changed table is caught before an AI agent answers from it.
  • Why: Ask two AI agents the same question and you get the same number.

Weeks 4–8 · Orchestrate

3 · Build it simply

Sometimes the simplest thing is plain software or one model call, not an AI agent. Our FDEs direct the AI agents doing the heavy lifting, and check their work.

Answers "production level systems" · Nikesh Arora

Week 8: running on your real data, in a test copy of your systems. Your owner says go.

The technical detail
  • For each task, we pick the simplest design that does the job, tested against how it's done today.
  • Often that is plain code or one call to a model. Sometimes a fixed workflow, with AI in a few steps. A full AI agent that picks its own steps only where the path changes every time. And sometimes the right answer is to leave the task with a person.
  • An AI agent acts through tools, like looking up an order or issuing a refund. Each tool is a narrow, approved MCP server behind one gateway, so every call goes through one door.
  • If a call times out, nothing retries blindly. Each action carries a unique key, so no refund is paid twice.
  • We choose the model by testing several on your own cases: quality, speed and cost per task. We fine-tune only when tests show a gap that better context can't close.
  • AI agents write much of the code, in an AI Code Factory: every change must pass its tests, a named engineer approves it, and every step is traced.
  • Why: Every extra moving part costs money and adds a way to fail.

Weeks 8–12 · Control and Prove

4 · Test everything, and keep it safe

It's tested many times over on cases no AI agent has seen. Your experts check it, and we attack it before anyone else can. Every AI agent can be found, limited and stopped.

Answers "discover, govern and stop agents" · Nikesh Arora

Week 12: ready to go live. Your people accept the measured results and practise stopping it.

The technical detail
  • It is tested on cases no AI agent has seen, and attacked before anyone else can.
  • We build a test set from your real cases and past failures, and grow it past 100 cases. A second set stays sealed. No AI agent or prompt writer sees it, so nothing is tuned to pass it.
  • Where an AI marks answers, its marks are checked against your experts' on cases it hasn't seen. Critical cases must pass on every run, not on average.
  • Every AI agent gets its own identity. Acting for a person, it gets only that person's rights. Rules are written as policy at the gateway and checked on every tool call, outside the AI.
  • Every model call goes through AgentCore Gateway, and AWS Service Control Policies refuse the rest. That is Agent ControlPlane, part of AK Run.
  • No AI agent holds private data, reads untrusted text and can send data out, all at once. That mix is how data gets stolen.
  • Before go-live, we attack it the way an attacker would, using the OWASP lists. Every attack that works becomes a test. The kill switch and the rollback are rehearsed, not assumed.
  • Why: One hidden instruction in an email can steer an AI agent, so the rails are built before the speed.

Week 13 on · Run and Improve

5 · Release and run, then yours

It goes live to a small group first, then to everyone. Then hypercare: we stay on call beside your engineers until they run it on their own. Every failure it meets becomes a new test, and the learning stays with you.

Answers "show a return" · Nikesh Arora

The technical detail
  • A new version goes to a small share of users first, and rolls back on its own if it slips.
  • That is a canary release. Its answers are checked on live traffic as it runs. If quality, speed or errors cross a line agreed in advance, it rolls back.
  • Each release records exactly what was approved: the instructions, the model, the tools and the policies. Any material change is tested and approved again.
  • After go-live, FDEs stay on call beside your engineers. The runbooks are written as we build.
  • Before we step back, your team runs a drill without us. They deploy a change, restore from a backup and take the on-call rota.
  • Cost per task, speed and how often a person had to step in are reported every week.
  • Why: Handover is a drill your team passes, not a meeting.

We sign the outcome before we build. Our fee rides on it.

By week 4 your owner signs a scorecard: the outcome, how it's measured, today's baseline, the target and what counts as a failure. If the numbers aren't there by then, we stop, and you keep what we found. From then on, the scorecard decides what we're paid. That's Guaranteed AI Outcomes.

ScorecardIllustrative

Customers get the right answer first time, with the right price for their contract.

MeasureConversations resolved with no correction, on a weekly sample your team leads check.

Baseline
What’s answered without a person today.
Week 4
Signed by your head of service: go.
Weeks 4 to 12
Build and prove: nothing reaches a customer yet.
A failure is
A wrong price quoted. A refund nobody approved. Both are caught in testing, before any customer sees them.
Week 13 on
Live, then hypercare. Five weekly samples, each higher.
Target
50% by day 120.

Day120

53%resolved with no correction

Our feeThe target is met.

Drag the coin to any day. Press the sign at week 4 to see a stop.

What your CFO, your CTO and your head of data want to know before they sign.

What a CFO, a CTO, a head of data and a CEO ask us first. Got another? Bring it to the working session.

  1. CF

    Your CFOWhat does it cost, and how big is the team?

    AK

    Armakuni An FDE team of 5 to 7 for about 13 weeks, then hypercare. The price is set per outcome, once the scorecard is agreed.

  2. HS

    Your head of serviceCan you rescue the pilot we already have?

    AK

    Armakuni Often, yes, and it's a good place to start. In weeks 1 to 3 we check it against a scorecard: what to keep, what to fix, and what's missing before it can go live. If it isn't worth finishing, we say so at week 4.

  3. CT

    Your CTOWho are the engineers?

    AK

    Armakuni Our forward deployed engineers, based in London, Florida and Ahmedabad. The lead and at least one engineer are with you every week. The lead owns the outcome; the others connect your data, build, prove and hand over. Each one leads a team of AI agents and checks their work.

  4. CT

    Your CTOWhich AWS services, and whose account?

    AK

    Armakuni Yours, from week 1. We usually build on Amazon Bedrock and Amazon Bedrock AgentCore. Amazon DataZone and AWS Lake Formation hold what your data means and who may see it. Every AI agent gets its own identity in Amazon Bedrock AgentCore, with least-privilege AWS IAM, and policy at the gateway checks every tool call.

  5. CT

    Your CTODoes it work if we're not all-in on AWS?

    AK

    Armakuni We build on AWS first, by design: our accelerators run there. The method works on other clouds too, but the accelerators don't yet, and we'll say so up front. Where your data lives in Databricks, we work with it there.

  6. CI

    Your CISOOur auditors will ask. What do we show them?

    AK

    Armakuni Evidence the system wrote as it ran. AWS Lake Formation enforces who may see which rows, not the prompt. Policy at the gateway checks every tool call an AI agent makes. Each release records what was approved: the instructions, the model, the tools and the policies. The kill switch and the rollback are rehearsed. The evidence pack maps each control to the rules you answer to: GDPR, HIPAA, SOC 2 and the EU's DORA. Mapped, not certified: your auditor decides.

  7. CF

    Your CFOWhat happens to the fee if you miss?

    AK

    Armakuni The part of our fee tied to the outcome is paid only when the scorecard shows the result. Before that, week 4 is a real exit, and nothing we found is lost.

  8. DA

    Your head of dataWhat do we keep, and what do you keep?

    AK

    Armakuni Everything we build stays in your own account, with full source: the code, the AI agents and their harness (the MCP tool servers, the policies, the tests and the eval sets), the domain model, the scorecard and the runbooks. At handover our access is removed. We keep only the generic patterns we learned, such as test patterns and attack suites. Never your data or your business logic.

  9. CE

    Your CEOWhen shouldn't we use you?

    AK

    Armakuni When one model call or a fixed workflow does the job. We'll say so and stop there. The same if nobody owns the outcome, or the data can't be reached in about four weeks. Better to hear it in the first conversation than in week 10.

What would it take for yours?

Press "Do this for us" on anything above, or pick one here, or type your own idea. This is what a first conversation with us covers.

From the feed
In your business

Bring the one pilot that matters most.

Bring a pilot that's stuck, or an outcome you want. We'll tell you plainly whether it's worth doing.

The way in
  1. A 90-minute working session, free. A written answer within three working days: the outcome, how it's measured, the data it needs, and go or no-go. No commitment.
  2. A first look, before any contract. Something real on your own systems, such as an Axiom data workshop, or a discovery workshop for a contact center.
  3. The engagement. About 13 weeks, with go or stop at week 4.
  4. Day two. Your team runs it, or AK Run does, and the next outcome starts from there.
The AK AI Factory cheatsheet

Two pages: every job the work goes through, what we check at each, and the two checkpoints before AI agents act and before it goes live. Version 2.5.