Navigator Framework™ · Startup edition Adapted from the Navigator Controls Catalogue · Stages 1–2 · See the full framework →
← Navigator Framework™
Navigator Lite · v0.1 working draft · 2026

AI governance for teams of 2–15.

The full Navigator Framework, compressed for startups and small teams. Stages 0 through 2. Three roles. 11 controls. Single-paragraph attestations. Governance-grade rigour without enterprise overhead — and without the parts that only matter at Stage 3 and above.

Risk classesLow & Moderate
Minimum roles3 distinct humans
Controls11 (NAV-1.x + NAV-2.x, vs 33 full)
DistributionOpen · working draft
I. What stays — the non-negotiables

Simplified. Not compromised.

Navigator Lite trades away redundancy — not rigour. Four things are unchanged from the full framework regardless of team size. These are the structural minimum that makes governance meaningful rather than theatrical.

Non-negotiable 01

Sandbox enforcement.

Least-privilege execution, verified by test — NAV-2.2, a Hard control. No relaxation by team size. A partial sandbox fails silently, and a small team can least afford to discover that in production.

Non-negotiable 02

Named human at every checkpoint.

A named, qualified human provides recorded approval before AI output advances. Not "someone is involved somewhere" — a specific, accountable, auditable act, per NAV-1.3/2.5.

Non-negotiable 03

Model independence.

The AI reviewing output must be a different model from the one that produced it. A model is blind to its own failure modes. Same-model self-review is not independence — NAV-2.6.

Non-negotiable 04

Exception process.

There is no informal exception path. Every exception requires a named approver, a hard expiry date, and a retrospective review — NAV-G.3. Governance dies through accumulated informal waivers.

Two-person teams: You need at least one external reviewer — an advisor, fractional CTO, or trusted peer — to check off. The same person who authored the spec or code cannot be the Reviewer. Self-review is not independence.
II. What changes for startups

Full framework vs. Navigator Lite.

Navigator Lite compresses the full framework without removing its structural integrity. Here is exactly what changes — and what does not.

Full Navigator Framework
Navigator Lite
Five stages, 0 through 4
Three stages, 0 through 2 — Governed Autonomy and above escalate
4 risk classes — Low through Critical
2 classes only — Low and Moderate
33 NAV controls, NAV-1.x through NAV-G.x
11 controls — NAV-1.x and NAV-2.x only
Full evidence package per Assessment Guide
Single-paragraph attestation per checkpoint
3 named functions for risk classification
Tech Lead + Founder sufficient
Certified Stage, assessor-evidenced
Self-reported Actual Stage only — Indicative, not Certified
Stages 3–4, High/Critical risk pathways
Escalates to full framework — not simplified
III. Stages 0 through 2

Same ladder. Minimum viable controls.

Navigator Lite runs on the same five-stage ladder as the full framework — it just doesn't go past Stage 2. What changes is the depth of evidence required at each stage gate, scaled to the risk class of your project.

Stage 0Traditional Stage 1Assisted Stage 2Supervised Loops Stage 3+Escalates
Stage 0
Traditional
Baselinehuman-authored, human-reviewed — AI absent from the decision
Stage 1
Assisted
Closes whenevery AI output is reviewed by a named human before it advances — NAV-1.x
Stage 2
Supervised Loops
Closes whensandbox, checkpoint enforcement, and a demonstrated kill switch are all live — NAV-2.x
Stage 3
Governed Autonomy
Not coveredescalation triggers as hard stops — full framework required
Stage 4
Continuous Assurance
Not covereddesign specification, not yet fielded anywhere

Stages 1 and 2 close on 11 controls total (vs 33 across all four stages in the full framework). These are the controls that, if missed, represent a genuine governance failure — not a process gap.

IV. Minimum viable roles

Three humans, not three titles.

In a startup, one person often wears many hats. Navigator Lite requires three distinct humans — not three distinct job titles. The constraint is independence, not headcount.

Role 01

Tech Lead.

Owns engineering decisions and the harness — sandbox, checkpoint enforcement, kill switch. Named owner for advancing Stage 1→2. Can be CTO, senior engineer, or founding engineer.

Role 02

Product / Founder.

Owns requirements, risk classification, and the exception process. Named owner for Stage 0→1. Can be CEO, CPO, or product lead.

Role 03

Reviewer.

A named person who did not author the AI work under review. Can be another engineer, a trusted advisor, or a fractional principal. Must rotate — cannot review their own output.

V. Risk classification

Two classes. Set once per project.

Class is set at project charter time by Tech Lead + Founder, using the same five determinants as the full framework (reversibility, named accountability, explainability, regulatory classification, blast radius), and revisited only if scope changes materially. If your work hits High or Critical criteria, Navigator Lite does not apply — move to the full framework.

Low risk

Internal / reversible.

No customer PII. No revenue path. Fully reversible. Single-artifact blast radius.

Admin dashboards · internal scripts · dev tooling · prototypes
Moderate risk

Customer-facing / PII.

Revenue-affecting, customer-facing, or handles GDPR-grade data. Team or product blast radius.

Public APIs · payment flows · user auth · customer features
High / Critical: Regulated workloads, AI in the decision loop, safety-of-life, or irreversible decisions require the full Navigator Framework. Navigator Lite explicitly does not cover these — it escalates them.
VI. When Lite isn't enough

When to upgrade to the full framework.

Navigator Lite is designed to grow with you. Move to the full framework when any of the following apply — not before, but not after either.

  1. i.You handle regulated data — financial services, legal, or HIPAA/DPDP-grade PII.
  2. ii.AI is in a decision loop that affects individuals — lending decisions, hiring, clinical triage.
  3. iii.Your blast radius becomes irreversible — safety, compliance exposure, critical infrastructure.
  4. iv.Your team grows past ~15 and role collapse is no longer reasonable.
  5. v.A regulator asks "show me human review" and Lite evidence doesn't satisfy them.

When you're ready to upgrade, a Navigator Audit is the cleanest path — it assesses your current governance posture against the full framework and tells you exactly what needs to change, in priority order.

Start governing your AI. Before you need to.

Download Navigator Lite as a PDF and adopt the framework. When your team grows or your risk class changes, the full Navigator Framework is one step away.

Open · working draft · No email gate · 2026