Every board is asking what the AI agents cost. The invoice only ever recorded the tokens — never the human drag, the shadow spend, the waste or the risk. AIM CFO is the ledger that does — every agent's cost, contribution and waste, priced from the same verified source that secures your fleet. It rides on AIM Sec: the CFO cannot price an agent AIM Sec has not first proven exists.
Below — the CFO cockpit for agent costs. Figures shown are an illustrative sample; in production the plane reads your live fleet.
🖥️ CFO · CISO · CIO — one console, one truth · the situation room
Every agent, with its price, on one screen. The CFO gets the Agent P&L — every agent's cost, contribution, human drag and waste, read from the same verified ledger that secures the fleet. The CIO sees the fleet and the CISO the exposure; the CFO sees what it all costs — and, from two buttons only, revokes or submits to committee, where the CIO and CISO decide together in the situation room. One console, one truth, each chair its own view. Click any agent to open its cost case.
Contribution margin — by agent
a negative-margin agent costs more than it returns — act on the row
Agent
Department
Work displaced
Run cost
Human drag
Margin
Action
AG-1042 · reconciliation
Finance
€41,200
€6,100
€1,900
+€33,200
—
AG-0871 · claims triage
Ops
€28,700
€4,400
€2,100
+€22,200
—
AG-1330 · contract review
Legal
€12,400
€3,900
€14,800
−€6,300
AG-0455 · report drafting
Marketing
€3,100
€8,700
€9,400
−€15,000
AG-0918 · (no activity)
IT
€0
€11,600
€0
−€11,600
You cannot switch an agent off from this screen — and neither can anyone else on
their own. Switching off an agent for economic reasons is a joint decision: it is proposed, your colleagues see
what the agent actually does, and any one of them can stop it. Immediate containment of a compromised agent is the
Blue Team's call, and it does not wait for anybody.
Departments — ranked by contribution
€ / agent is the number to manage on — not the total
Best: Finance· Needs intervention: Legalby contribution per agent
#
Department
Agents
Displaced
Cost
Drag
Waste
Net contribution
€ / agent
Margin
1
Finance
268
€266,200
€96,400
€12,600
€8,900
+€148,300
+€553
55.7%
2
Support
126
€84,900
€34,700
€5,100
€3,200
+€41,900
+€333
49.4%
3
Sales
78
€52,100
€21,900
€3,400
€2,100
+€24,700
+€317
47.4%
4
Ops
3 of 351 agents negative
351
€259,100
€128,300
€19,800
€14,600
+€96,400
+€275
37.2%
5
IT
22 of 217 agents negative
217
€115,200
€74,200
€7,900
€41,300
−€8,200
−€38
−7.1%
6
Marketing
14 of 113 agents negative
113
€40,200
€24,800
€10,000
€13,600
−€8,200
−€73
−20.4%
7
Legal
9 of 104 agents negative
104
€46,900
€32,600
€12,400
€12,700
−€10,800
−€104
−23.0%
—
R&D (pilot)
0
—
—
—
—
—
no agents
—
Read the € / agent column, not the total. Ops is 2nd by total contribution
(€96,400) on 351 agents — but only 4th per agent, behind Support (126 agents) and Sales (78).
Total contribution rewards whoever deployed the most agents; € / agent tells you who is running the better
operation, and where to intervene.
Department drill-down — the agents inside a department
select a department · open any agent for the full detail window · revoke, or submit to the situation room
Department:
Agent
Mission
Work displaced
Run cost
Human drag
Margin
Action
Click an agent code to open the full detail window · or act on a row: Revoke requests a stop through the situation room; Submit to committee puts it on the room's agenda. Nothing is switched off from this screen.
The waste ledgerspend that produced nothing — itemised, in euros€96,400
Blocked-loop burnagents that keep retrying work the gate refuses · 34 flagged€21,300
Duplicate missiontwo departments, one mission, paid twice · 18 flagged€14,900
Shadow spendagents nobody registered — spend nobody authorised · 27 shadow agents · FLOOR, not a measurement€22,600
Out-of-window burnactions fired outside the declared operating period · 12 flagged€9,200
Over-scoped mandateauthority granted and never once used · 9 agents over-scopedNot enough data yet— we can PROVE the over-scope and itemise it, but we cannot honestly price it. Shown, not guessed.
Budget caps & this ledgerADVISORYREPORT ONLY. This cockpit computes and reports; it enforces nothing.
📩 Daily digest2026-03-31
Yesterday's agent payroll. 3 agents ran at a negative contribution margin.
Run cost (agent spend)€13,320
Work displaced€25,600
Human drag€2,300
Waste€3,110
Contribution margin+€6,870
AG-1330Legal−€210
AG-0455Marketing−€480
AG-0918IT−€375
the same figures your board will be shown
Every figure above is computed from your own fleet at your own contracted rate. Where we cannot yet
compute a line, we say so — we do not fill the gap with an estimate.
👁️ Discovery — the agents nobody declaredshadow agents surface the moment they act — not at the next audit
🔺 The lethal trifecta — the three legs that make an agent dangerousprivate data × untrusted content × outbound action · break ONE leg and the agent is structurally safe
🎯 Mandate drift — is it still doing the job it was bonded to do?it is still itself — but is it still doing its job?
🧰 AI-BOM — the agent's bill of materialsmodel · tools/MCP · attestation — the agent-native bill of materials, beyond legacy software SBOM
⏱️ Time to contain — the only SOC clock that mattersthe attacker is a machine · so the responder must be one too
Most teams can detect a misbehaving agent long before they can actually stop one. Blast radius keeps accumulating in the gap between detect and terminate — and that gap is where the damage happens. AIM closes it.
🕸️ Contagion cone — revoke the agent, quarantine the coneagents trust each other by default · a compromised agent poisons everything downstream of it
🧠 Memory & reinstatement — a new passport on a poisoned brainrevoking the identity does not clean the memory · if it re-attaches to the same store, you have the same problem
⚛️ Quantum — every agent carries a post-quantum passportML-DSA-87 · FIPS 204 birth certificate · harvest-now-decrypt-later proof
⚖️ Legal & GDPR — data stays where the law requiresenforced BEFORE data enters the agent — a bad transfer is prevented, not logged
A non-compliant transfer is prevented, not logged after the fact. EU / PII data does not leave the region or the company without policy and executive consent. Transfer decisions carry the largest GDPR fines on record (€1.2B Meta, Irish DPC 2023; €530M TikTok, Irish DPC 2025). Full audit trail for the DPO.
🔒 The data-to-model gate — only authorized data ever reaches a model
🤖 Agentwants to call a model
data →
⚖️ AIM gatepassport · data class · region · consent
→
✅ Authorized → data reaches the model
🛑 Unauthorized → blocked at the gate, before it leaves (fail-closed)
Static tools flag the leak after it happens. AIM decides at the gate — the unauthorized data never reaches the model.
Interactive preview — this is a design demonstration, not a live tenant. This is the AIM Blue-Team plane for an agent fleet: fleet health and the exception queue; the discovery census that surfaces the agents nobody declared; the lethal trifecta score (private data × untrusted content × outbound action); mandate drift; tool / MCP attestation; time to contain; and the contagion cone — revoke an agent and quarantine everything downstream that acted on its output. The Onboard agent flow lets you pick a division or create a new one. Figures here are seeded to demonstrate the design; in production the plane reads your live fleet. Nothing is written from this preview.
Onboard an agent — the Muster gate
Every agent is registered, risk-scored, and issued an AIM Passport (ML-DSA-87). No muster = no passport = it cannot run.
1 · IDENTITY
agent code AIM-##### is auto-issued
2 · OWNER (accountability)
pick an existing division — or choose “➕ Create a new department”
max agents this division may create
creates a division that appears on the plane with its own health banner — for structures traditional departments don't fit
3 · MANDATE
4 · TOOLS & SYSTEMS
5 · DATA CLASSIFICATION
6 · FUND MOVEMENT (sets the authority tier)
7 · LIFESPAN
8 · OPERATION WINDOW (containment)
The owner requests a window; company policy overrides it. The approved window is the agent's authorised operating period — recorded on the passport and governed by the Blue Team. An agent with no window has no boundary in time, and time is a boundary.