Human review and adoption thresholds
A system that is accurate but slow to check hasn’t saved anyone time. Set a ceiling on reviewer minutes per case, against today’s number from the baseline you documented at the gate, and count the time spent correcting output as well as reading it.
Then set an adoption threshold: the share of target users who actually use the system in their daily workflow during the test, measured from usage rather than from what people say in a survey.
Our own LilyAssist project shows what this looks like when review is designed in. The platform helps school psychologists produce evaluation reports: the AI drafts test descriptions, score tables, section summaries and narratives, while the psychologist remains responsible for reviewing, editing and approving every report. It now has 1,000+ users and has processed 20,000+ assessments. Wherever a professional signs off on every output, as here, the time that sign-off takes belongs in the business case.
Security risk thresholds
Name the findings that stop the project outright. Training or prompting on personal data without a lawful basis. Model output that leaks one customer’s records to another. Those are stop conditions.
Prompt injection and policy bypass need a different kind of threshold, because in practice no LLM system passes every attack. Define a set of attacks before testing, covering instruction overrides, attempts to extract data the user shouldn’t see, and attempts to bypass policy controls, and set a pass rate on that set. A successful attack that exposes one customer’s data to another is still a stop, whatever the overall pass rate.
Then name the findings that allow progress only with a funded mitigation and a named owner, which is a different and weaker category. Regulatory timing belongs here too. The EU AI Act's transparency obligations under Article 50 apply from 2 August 2026 to any system that interacts directly with people or generates synthetic content, and Cooley notes that non-compliance can trigger fines of up to €15 million or 3% of worldwide annual turnover. A disclosure requirement you can meet in a week is cheap. The same requirement discovered after launch is not.
Record the evidence
Report each result next to its threshold and its baseline, even the ones that missed. The failures are the most valuable part of the record, because they are the only part that tells the decision owner where the system breaks and what it would cost to fix.
Write down what you did not test. That list is longer than the one you did test, and it's where the next stage's risk lives. Scrapping a proof of concept is common. S&P Global Market Intelligence surveyed more than 1,000 organizations in North America and Europe and found the average company scrapped 46% of its proof-of-concept projects before production, with the share abandoning most of their AI initiatives rising to 42%, up from 17% a year earlier.
A usable evidence record for an AI PoC contains:
-
Every result against its threshold, with the number of cases behind it
-
Each critical error, described individually rather than averaged away
-
Assumptions carried into the test but never checked
-
Constraints that made the test less representative than production, such as a curated data sample or an engineer intervening mid-run
Say how confident you are and why. Two hundred cases from one business unit over three weeks supports a narrower conclusion than a quarter of live traffic, and the write-up should say so rather than leaving the decision owner to guess.
Estimate the next stage
Now cost the thing you are actually being asked to approve: the additional data work, the staffing to run it, and the production engineering still to be built, priced at production volume rather than pilot volume.
Every residual risk gets a named owner and a date. The owner is a person. An AI business case that assigns risk to a department has assigned it to nobody, and the risk reappears during the first production incident.
Make the funding decision
The named owner applies the outcome agreed at the gate, on the date fixed at the gate: go, pivot, hold or stop, exactly as defined there. If a result falls between a pass number and a fail number, apply the in-between rule from the gate rather than rounding it up.
Stop is a result, not a failure of the process. In a July 2025 preliminary report, MIT’s NANDA initiative found that only 5% of integrated AI pilots were extracting millions in value, while the vast majority had no measurable P&L impact, so a stop is a realistic outcome to plan for.
Hold the AI PoC success criteria exactly as written. If every other threshold passes and the critical error ceiling doesn’t, the answer is pivot or stop, whatever the demo looked like in the room.
Prevent criteria drift
The two failure modes are easy to spot in hindsight and hard to resist in the moment. A flawless happy-path demo gets presented as proof, and thresholds get quietly adjusted once the results arrive. Both convert a decision gate into a formality.
When the evidence misses the gate, change the use case or stop funding it. That discipline is the whole return on the exercise, because the money saved on a failed AI PoC is the money available for the next one.
Planning an AI proof-of-concept? Praetorix Foundry is a senior-led, product-first studio for web, mobile, and AI products. Our AI Pilot takes one AI use case from agreed success criteria to a working prototype, findings, and recommendations in two to four weeks, so you set the gate before testing starts.