The Director's Dilemma

What boards owe oversight now that every company is at least dependent on advanced AI.

Summary

Every company is now at least dependent on advanced AI. That makes oversight a board duty, not a management memo. You do not need to build frontier models to carry frontier-scale risk. A company that merely runs on AI-dependent vendors and infrastructure inherits the concentration and continuity exposure this series spends nine volumes mapping. This closing volume asks what a board specifically owes oversight, once "we don't really do AI" stops being a defense.

The tenth and closing volume of the Frontier Series is written for the people who will be asked, after the fact, what the board knew and when. It argues that AI oversight is now squarely a board duty for every company, not just the ones building frontier models, since even the most AI-distant firm is at minimum dependent on vendors and infrastructure this series treats as a monoculture risk. The report names three postures a company can hold, builds the due-diligence playbook and committee architecture each requires, and closes the series with the self-assessment a board can run before its next AI-related decision.

Key findings

1. There is no fourth posture called "uninvolved." Every company is a developer, a deployer, or at minimum a dependent, reliant on vendors and infrastructure whose failure modes are now the company's own.
2. The board usually knows less than it thinks Confident management demos are not evidence. The information gap between what leadership knows and what the board is told is often widest exactly where the risk is highest.
3. "We have an AI committee" is not an answer by itself Committee architecture matters less than whether it has real cadence, real expertise, and a real reporting line, decorative committees provide no assurance at all.‐
4. Due diligence has a specific, checkable shape Assurance case reviewed, concentration mapped, incident plan tabletopped, not a vague comfort briefing from the team proposing the deployment.
5. Disclosure is a market-pricing problem, not a PR problem Investors and insurers cannot price a risk the company will not name. Silence is not neutral; it is a bet that nothing goes wrong before someone asks.
6. Posture shifts, the assessment has to repeat A company that was purely "dependent" last year may be a deployer this year. The due-diligence exercise is annual, not a one-time board resolution.

How to cite this report

The Director's Dilemma: What boards owe oversight now that every company is at least dependent on advanced AI. FAIR Labs Frontier Series, Vol. 10. Fair Artificial Intelligence Research Labs, 2026. Available at https://fairlabs.ai/research/frontier-vol10-the-directors-dilemma

Topics: corporate governance, board oversight, fiduciary duty, due diligence, AI risk disclosure

FAIR Labs (Fair Artificial Intelligence Research Labs) is a nonpartisan 501(c)(3) research institute in Washington, DC. Its reports may be reproduced with attribution for non-commercial purposes. For interviews, briefings or data requests, use the contact form.

Related FAIR Labs reports