Portfolio choices for production-grade AI
AI reopens the custom versus off-the-shelf debate because it changes the portfolio logic. A single decision for the whole enterprise is rarely credible. The practical approach is to segment by differentiation, risk, and change frequency.
Build the workflow layer that differentiates
Where competitive advantage depends on how decisions are made, bespoke software is increasingly defensible. Examples include underwriting, complex B2B deal shaping, supply chain exception management, and customer retention workflows. These domains evolve with policy, market conditions, and learning. The ability to change weekly, not quarterly, can be worth more than the comfort of a standard suite.
Buy the commodity, own the integration
Packaged systems can remain the system of record. The AI-native opportunity often sits on top: a bespoke workflow and decision layer that orchestrates across systems, captures rationale, and enforces controls. This reduces the temptation to customise vendor products into un-upgradeable shapes, while still enabling differentiated operations.
Kill, contain, or scale pilots with criteria
Pilots should not graduate because they are popular. They should graduate because they shift unit economics without increasing uncontrolled risk. Useful criteria include: a measurable reduction in cost-to-serve of 10 to 20 percent in the target process, stable exception rates, a clear audit trail for AI-influenced decisions, and an owner willing to be accountable for outcomes. If those conditions are not met, the pilot is either contained to a low-risk domain or stopped.
Decision test for the reopened debate
The renewed question is not "build or buy?" It is "what must the organisation be able to change quickly, and what must never change without formal control?" AI makes both sides more important.
The uncomfortable organisational question that follows is simple: when an AI-influenced decision causes harm, is there a named person who can explain the workflow, justify the design choices, and show the evidence trail, or is responsibility dispersed across vendors, tools, and committees?