Capability 18 · Artificial Intelligence

Artificial Intelligence

AI where it genuinely helps — not AI for the sake of the word.

Before you read: Written from live engineering practice — the money-moving, million-user work our team runs on our own products, set down so anyone building something can learn from it.

01 · What it is

We treat AI as a tool in the build, judged by the same yardstick as everything else: does it make the operation cheaper, faster or more correct? LLM-powered assistants and copilots that answer from your own data, document understanding and summarization that turns paper piles into records, classification and routing that triage requests before a human looks, recommendation that moves the numbers — all with human-in-the-loop where the cost of a wrong answer is high. Everything is costed (AI bills are real), measured and safe to run in production.

What a artificial intelligence build covers:

  • LLM-powered assistants & copilots grounded in your own data
  • Document understanding & summarization for paper-heavy operations
  • Classification, routing & triage before a human picks it up
  • Recommendation & personalization that move real numbers
  • Human-in-the-loop where a wrong answer costs money
  • Costed, measured and safe to run in production
What we do · How we do it — as TGJOF Enterprise

This is how we do Artificial Intelligence

Artificial intelligence is not a product to install; it is a set of real capabilities — classification, prediction, generation and retrieval — each with a cost, a failure mode and a governing discipline. We build the honest version: the business case is costed before a model is called, answers are grounded in the client's own data with sources attached, and the system is evaluated against a curated test deck rather than shipped on a demo. The production standard is a boxed, observed machine — scoped, gated, metered and reversible — with hallucination risk engineered down and disclosed where it remains.

What we do

  • Classification, prediction, generation and retrieval — we fit the capability to the problem rather than the fashion; the quiet work of sorting, forecasting and finding usually delivers more than the fluent writing.
  • Grounded answers, never confident guesses — retrieval pulls the relevant policy, clause or record first and the model composes from that evidence, citing the source it actually read.
  • Evaluation as the test suite for AI — curated sets, golden safety answers, precision and recall and adversarial cases measure whether the system is right, safely, before and after every change.
  • Hallucination control by design — grounding, answer confinement and verification shrink the space in which fabrication can form, and the residual risk is named rather than prayed away.
  • A box around the machine — permission scoping, gated tools, egress control and a prompt-injection-resistant boundary make the AI safe to run beside real people and real data.

How we do it

  • Cost the arithmetic first — per-use tokens, pipeline upkeep and infrastructure against time saved and errors avoided, with an honest no when the sum does not close.
  • Make the data ready before the model matters — inventory, clean, structure and permission the corpus, because an AI on an ungoverned pile answers confidently from the mess.
  • Evaluate against gold before release — we score the baseline, require the measurements and regression-run the deck on schedule so drift surfaces before customers feel it.
  • Deploy boxed and observed — the AI sees what its role allows, acts only within its gates, and its tokens, latency, cost and failures are watched like any other subsystem.
  • Keep a human where the stakes are high — money, identity and legal commitment keep a person in the loop and on the record; the machine proposes and the governed rule or the human decides.

02 · The full discipline

AI judged by the only yardstick that matters: does it make the operation cheaper, faster or more correct — and is it safe to run in production?

There is no sentence in technology more expensive, and more dangerous, than 'we need AI'. It is pitched as a miracle, sold as a trend and installed as a feature that nobody costed, nobody measured and nobody can turn off safely. The honest reality is both more modest and more useful: AI is a set of capabilities — classification, prediction, generation and retrieval — that each solve specific problems, cost real money per use, fail in specific ways and need to be governed in production like any other infrastructure.

We deploy AI the way a live payments platform has to — because KodiiPay's engineering discipline is one where a wrong answer has a price: a misread balance, a hallucinated policy, a leaked record, a churned customer. So every AI capability we build is costed (the token bills are real), grounded (it answers from your data, not its imagination), measured (we evaluate before and after), and boxed (it can observe and propose, and act only within the same gates as the rest of the software).

Below is the honest tour of AI as we build it: what it genuinely does, what it does not, how we ground it, evaluate it, deploy it safely, and where we refuse it outright. This is AI treated as engineering — because that is the only treatment that survives contact with real money and real customers.

03

The honesty tour: what AI actually is

Before the features and the demos, the ground truth. AI — especially the large language models at the centre of today's wave — is a statistical system that has learned patterns from enormous volumes of text. It is not a mind, it is not truth, and it is not a colleague with opinions. It is a capability with a specific shape, and that shape decides where it helps and where it harms:

  • Classification — deciding which of known categories something belongs to: is this ticket a complaint or a query; is this transaction anomalous or ordinary; is this document a contract or a receipt. This is AI's most reliable, most valuable and most overlooked strength.
  • Prediction — estimating from history what comes next: which customer is likely to churn, when the cash is likely to run low, which day next week the volume spikes. Always a probability, never a certainty.
  • Generation — producing fluent text, summaries, drafts and structured output: the assistant's answer, the report's summary, the support reply. Powerful, fluent, and the discipline that hallucination makes mandatory.
  • Retrieval — finding the right fragment from your own documents and records when a question is asked: the correct policy clause, the relevant past case, the matching transaction. The grounding that makes the other three safe.
  • Embedded in software, not a product — AI is usually one capability inside a larger system — a classifier in the intake, a summariser in the handoff, a retriever in the search — and that is almost always the right way to deploy it.
  • The hard limit — it does not know what is true; it knows what is probable in its training. Everything it says must be checkable against a source, and everywhere the answer must be right, human oversight pays the rent.

The entire design discipline that follows exists because of that gap between confidence and truth. We design for the gap; we do not pretend it away, because pretending is how AI projects and AI brands fail.

04

The business case, costed and measured

The first filter an AI idea meets in our studio is not 'is this possible' — it is 'does the arithmetic work'. AI has a real cost per use — tokens, API calls, retrieval, infrastructure — and a real value per use — time saved, errors avoided, revenue moved. We put both on the table before a single model is called:

  • Cost per query is tracked — every prompt, retrieval and completion is metered against the job it serves, because an AI feature that saves ten minutes but costs a shilling a call may be a quiet loss hidden in an impressive demo.
  • Value is defined as outcomes, not outputs — a support classifier is valuable if it cuts resolution time and reroutes correctly, measured on the queue; a copilot is valuable if it closes tickets or makes decisions people trust — measured on the work.
  • The simple baseline wins — a fast search, a rule, a human: if the plain engineering answer is cheaper and correct, that is the answer; AI earns the role, it is not entitled to it.
  • Pipeline costs are included — the retrieval index to maintain, the documents to keep clean, the evaluation set to curate, the monitoring to run: AI is a system with an operating budget, not a one-time costume.
  • ROI with a review date — every deployment gets a defined moment where we look at the real numbers — cost, accuracy, time saved — and decide to keep, tune or retire.
  • The honest no — when the arithmetic does not close, we say so, and usually a cheaper non-AI fix is the recommendation; that honesty is why the clients who do deploy with us trust the deployments.

We apply the same arithmetic to our own platform's AI candidates. The question is never 'can we use AI here'; it is 'does this AI earn its tokens and its risk here' — and there is no feature at the table whose answer is assumed.

05

Data readiness: the real gate

The single most common reason AI projects fail is not the model — it is the data. AI is a hungry consumer of clean, structured, accessible information, and most organisations' data is scattered, duplicated, contradictory and undocumented. We treat data readiness as a deliverable, not a precondition:

  • Inventory before inference — we map what data exists, where it lives, who owns it and what it is actually good for, before any model is pointed at it.
  • Cleaning and deduplication — the pipeline removes the duplicates, resolves the conflicts and normalises the formats, because garbage in produces confident garbage out.
  • Structured where it pays — documents, records and histories are organised — the contract, the policy, the ledger, the ticket archive — into a form retrieval can actually use.
  • The ground-truth test — can the source of truth answer the question a human would ask? If a human cannot find the policy in the pile, no AI will either; the pile is fixed first.
  • Privacy and permissioning mapped — what the AI may see is decided before it sees anything, with the same access rules that govern the humans.
  • The maintenance reality — a document collection that is not kept current produces an AI that answers yesterday's truth; the data pipeline is a standing operation, budgeted honestly.

On a payments platform this discipline is non-negotiable: the AI that answers 'is my payment processed' is only as trustworthy as the ledger it reads — lucky for us, the ledger is the most disciplined data in the business, and the pattern is the one we bring to client data.

06

Grounded, not hallucinating: RAG done properly

The moment that separates useful AI from dangerous AI is the answer's relationship to ground truth. A pure model answers from its training — fluent, confident and sometimes fabricated. Retrieval-augmented generation (RAG) answers from your own documents and records, with the source attached. We build the grounded version, and the difference is the product:

  • Index your own corpus — the contracts, policies, procedures, price lists, histories and records are chunked and indexed so the right fragments are findable in the moment a question arrives.
  • Retrieve before you generate — the assistant gathers the relevant evidence first and composes its answer from that evidence, not from memory; no evidence, no answer, only an honest 'let me connect you'.
  • Hybrid search where it serves — keyword and semantic retrieval are combined so the exact clause is found by its words and the similar case by its meaning; the routing is tuned, not guessed.
  • Sources shown alongside answers — the output cites what it read, so a customer or a staff member can open the policy and check; citeability is the trust currency of grounded AI.
  • The answer is confined to the evidence — the model is instructed to answer from the retrieved context alone and to decline when the context does not answer; the hallucination is designed out of the workflow, not prayed away.
  • Grounding for money facts is absolute — a balance, a deadline, a fee or a status is never generated; it is read from the books by the tool layer, with the ledger as the only source.

We describe the architecture to clients in one honest line: 'what does our policy say' returns the policy — with the paragraph number — never the model's guess about the policy. That is the difference between an assistant and a liability.

07

Fine-tuning: when it is worth it

Fine-tuning is one of the most mis-sold ideas in AI — pitched as the fix for everything when it is, in truth, a specialist tool for a narrow set of problems. We deploy it only where the evidence supports it, which is less often than the market implies:

  • Fine-tuning is not grounding — training a model further on your documents does not make it answer from them reliably; retrieval does that. The model's next word does not carry a source with it.
  • It earns its cost on style and structure — a model tuned to write your brand's exact tone, to emit your specific document format, or to score in your precise domain vocabulary: that is where a small tuned model beats a prompt on a giant one.
  • It earns its cost on performance — where a smaller tuned model matches a larger general model on the task, the tuned model wins on latency, cost and control.
  • The evaluation gate comes before the tune — we measure the baseline, propose the tune, and only invest where the measurement says the gap is real and a tune closes it.
  • The dataset is a deliverable — the curated examples that train the model are as valuable as the model itself; a client evaluating AI has to be able to question and rebuild on the data.
  • Prompting, retrieval and tools come first — ninety percent of the time the grounded, tool-using, well-prompted system solves the problem without a tune; the tune is the rare top-up, not the default.

The test we apply to every fine-tune proposal is the same: does the tuned model measurably beat the grounded general model on our evaluation set, at a cost the business accepts? If yes, we tune. If no, we say why.

08

Evaluation: how we know it works

Software has tests; AI needs evaluation — the discipline of measuring whether the system answers correctly, safely and consistently, before and after every change. Without it, 'the AI works' is a feeling, and feelings are how production incidents are born:

  • Curated evaluation sets — a bank of real questions and their expected answers, drawn from the actual operation — the tricky ones, the ambiguous ones, the ones humans get wrong — scored by hand.
  • Accuracy, precision and recall — classification is measured not by a single score but by what it gets right, what it misses and what it falsely reports, because a support classifier's false positives and false negatives cost different things.
  • Golden ground-truth tests — the money and safety questions are pinned to verified answers, and every release is checked against them before it reaches a customer.
  • Regression over time — the model or its provider changes and the evaluation tracks whether the answer got better, worse or drifted; the test deck is a standing instrument, not a launch milestone.
  • Adversarial cases included — the prompt-injecting message, the misleading question, the out-of-policy request: the evaluation includes the attempts to break the system, because production will include them.
  • Human review of samples — continuous sampling of live interactions with human scoring feeds the deck and the tuning, so the evaluation is a living loop, not a frozen report.

The honest summary we give every client: we do not ship AI on confidence; we ship it on measurements. The deck that proves it works is part of the handover, and it keeps proving it after we leave.

09

Hallucination and the risk that stays

Every AI conversation, ours included, has to begin with a truthful statement: hallucinations — fluent falsehoods — are reduced by design, never eliminated by hope. The engineering question is what happens the moment one occurs, because that is what separates a system from a disaster:

  • Reduction by architecture — grounding, retrieval, source-citing and answer-confinement shrink the space in which a hallucination can form, which is the honest lever we pull hardest.
  • Reduction by capability — a model asked to answer only from retrieved evidence and to decline in its absence hallucinates far less than a model invited to improvise; capability choice is a safety control.
  • Reduction by placement — the AI's outputs are recommendations, drafts and summaries that a governed action follows only within policy, so a fabricated phrase can rarely cause a fabricated action.
  • Detection by verification — where the stakes are high, the output is checked against the source — the cited clause, the read ledger value, the rule — before it is used, believed or acted on.
  • Danger zones are gated harder — money, identity, legal commitment and customer-facing promises: the interfaces to those zones carry the strongest verification and the lowest-trust assumptions.
  • The residual risk is named — we tell clients exactly where the AI can still be wrong, under what conditions, and what the system does about it — because a risk you can name is a risk you can run with.

The standard we operate under is brutally practical: a hallucinated answer must cost nothing it can reach. By the time an output can affect a balance, an identity or a signature, it has passed through verification and policy — the imagination is never the last word.

10

Boxed and observed: how we deploy it

Our production deployment model for AI can be described in two words: boxed and observed. The AI lives in a container with boundaries — what it may read, what it may say, what it may touch — and everything it does is logged, metered and sampled. It is treated as a subsystem, not as a sorcerer:

  • The box has walls — the model sees only the documents and records its job requires, under the same permissioning as the humans; it cannot wander into data it was not hired to handle.
  • The box has tools with gates — actions the AI may invoke — read a balance, draft a reply, update a record, escalate a case — are named, scoped and logged; money-changing tools carry conditions and often a human.
  • The box has a veto on the internet — egress is controlled so the model cannot be a channel for exfiltration or an unknowing participant in prompt attacks from outside.
  • Prompt-injection resistance — the model is not a privileged agent; a message cannot instruct it to reveal another customer's data or bend a policy, because the permissioning lives outside the model.
  • Everything is observed — tokens, latency, cost, outputs, actions and failures are logged and watched; a feature that drifts in cost or behaviour is found by the board, not by a customer.
  • Kill-switches and rollback — a deployment is a release: instant-off, versioned, reversible. The AI can be throttled, gated or retired in minutes, not negotiated with.

Beneath the framing is the same discipline as our payment rails: grant the least power, require the evidence, log the outcome and hold a reversibility handle. An AI that can see, say and do only what its box allows is an AI a real business can run; an AI with none of those wraps is a demo.

11

Classification, triage and routing: the quiet heavy lifting

The highest-ROI and most dependable AI capability is not the one that generates words; it is the one that sorts them. Classification and routing quietly remove the most expensive labour in an operation — deciding where each thing belongs — before a human ever looks:

  • Ticket and request triage — the incoming support item is classified by type, severity and urgency and routed to the right queue; the human's first action is resolving, not deciding jurisdiction.
  • Document classification — the uploaded contract, ID, receipt or report is identified and filed to the right case by the right process — the intake pipeline sorts the paper where a clerk used to.
  • Transaction screening — the classifier scores transactions against the patterns of the business — ordinary and anomalous — so the unusual one surfaces to a reviewer with its context attached.
  • Language and intent routing — a customer's message is understood sufficiently to pick the correct response path, escalation path or answer — the machine does the reading so the person does the judgement.
  • Rerouting on evidence — the classifier is not a black box; the signal that drove the decision is visible, so an operator can see why a request went where it went.
  • Measured like a machine — precision and recall are tracked per category, and misroutes are the tuning data, so the router improves on the evidence of the misfires.

We call classification the quiet heavy lifter because it never gets the glamour and delivers the largest share of the savings: every item it correctly places is an item a person did not waste a minute triaging — minute by minute, that is the difference between a queue and a flow.

12

Anomaly detection: the day that quietly went wrong

Most operational disasters are not loud; they are a slow deviation that nobody noticed until it was expensive. Anomaly detection gives the operation an attention filter that never blinks — it flags the day, the account, the pattern that drifted, before the drift compounds:

  • Behavioural baselines — the system learns what is ordinary for an account, a queue, a location or a day, and then notices when the ordinary stops.
  • Payment-pattern screening — unusual transaction sizes, frequencies, recipient patterns or timing sequences are surfaced as candidates — the fraud team starts at the interesting part.
  • Operational drift — the queue that suddenly grows, the reconciliation line that keeps failing, the payout that repeats: the machine flags the trend while there is still time.
  • The evidence, not the vibe — each anomaly is presented with the context that made it unusual — recent history, comparable accounts, the rule that was broken — so review starts informed.
  • Thresholds that scale — the sensitivity is configurable per category so the operation is not drowned in noise and not silent to the real signal.
  • Human review loops — flagged anomalies route to a reviewer with the audit trail attached, and the reviewer's decision teaches the detector.

On a money platform this is the highest-value 'AI' of all: not a chatbot, but a sentinel — the machine that reads every transaction against every pattern and surfaces the one that should never have happened, before the month-end reconciliation has to.

13

Document understanding: paper piles become records

A large fraction of every organisation's knowledge is trapped in documents nobody reads — contracts, receipts, forms, archives, PDFs. Document understanding extracts the meaning so the knowledge becomes searchable, usable and accountable:

  • Extraction — the model reads a document and pulls its structured facts — the contract's parties and terms, the invoice's amounts and dates, the ID's fields — into the record instead of the vault.
  • Classification of the pile — each document is identified, routed and stored correctly, so the archive stops being an ocean and becomes a catalogue.
  • Searchable meaning — a question like 'which agreements allow early termination?' is answered by reading the documents, not by a filename guess — retrieval over content, not over titles.
  • Summaries that accelerate — long contracts and dense reports are summarised for the person who must decide, with page references so the decision can be checked against the source.
  • The guard on accuracy — extracted fields are confidence-scored and the extraction that matters — a payment reference, a bank account — is verified by a human or by the source before use.
  • The audit of the reading — what was read, what was extracted and where it went is logged, so the document pipeline is accountable like every other data path.

We are honest that the holy grail is not 'AI reads everything'; it is 'the thing you need is findable and trusted in seconds' — and extraction, classification and retrieval are how documents stop being buried and become assets.

14

Assistants and copilots that genuinely help

The public face of AI in most products is the assistant — and the difference between one that helps and one that frustrates is the same boring architecture beneath: grounded answers, governed actions, honest limits and clean handoff. We build assistants as staff, not as ornaments:

  • Internal copilots — the staff member asks 'what does the policy say', 'where is this customer's matter' or 'why did this fail' and gets a grounded, cited answer that shortens the day instead of extending it.
  • Customer-facing assistants — the customer asks about their account, their payment, their next step and gets fact, not fiction, with the reach-a-human path one step away.
  • The answer travels with sources — the cited policy, the referenced record, the read balance: the assistant's confidence is only as good as the source it shows.
  • It acts within the box — the assistant updates a status, sends a receipt, opens a case or defers a promise only through governed tools, exactly as a carefully hired staff member would.
  • It knows when it is out of its depth — novel, ambiguous, high-stakes and human-touch requests escalate with the brief attached; the measure of the assistant is the quality of its handoff, not its fluency.
  • It is measured on the job — resolution, deflection, cost, satisfaction and escalation quality are the scoreboard; an assistant that is not scored is being managed by the vibes it projects.

The line we hold with every assistant build is the one our payment platform holds with its own: an assistant may be fluent, but it is never a judge, never a money authority and never a place for a customer to be left believing something the books do not support.

15

Prediction: judged against reality, not optimism

Prediction is where AI is sold most grandly and fails most quietly — because a confident forecast of the future is hard to falsify today and easy to forget next week. We build forecasting the way we build bookkeeping: against reality, with a scoreboard:

  • Forecasting on actual history — the model is trained and tested on what actually happened — collections, volumes, demand, cash — never on the optimism of the spreadsheet.
  • Backtesting against the truth — a forecast is only trusted after it has been run against past reality and shown to be right; the track record is the credential, not the narrative.
  • Confidence is a band, never a point — the output is a range with its own uncertainty, so a decision made on it knows the space it is betting on.
  • The decision is what matters — the forecast is valuable insofar as it changes a decision — how much stock, which resource level, when to top the float; output with no decision attached is decoration.
  • The plainly statistical is preferred — where a well-built statistical model matches a fancier AI at a fraction of the cost, the statistical model wins; the magic is not the point, the accuracy is.
  • The honest use — we present predictions as inputs to judgement, with the human and the business as the decision-maker; the AI narrows the guess, it does not replace the ledger.

The honesty is the value: we would rather ship a modest model whose track record is proven on your own history than a grand model whose claim is its pitch. The first one builds trust; the second one builds a review meeting.

16

Recommendation and personalisation that move numbers

Recommendation is AI's most commercial face — the engine that decides what a customer sees next — and its reputation is deservedly mixed, because most recommendation is noise. We build the honest version: recommendation that is measured on outcomes, not on how personal it sounds:

  • Grounded in behaviour, not fantasy — the recommendation uses the customer's actual history and the business's real catalogue — what was used, what was paid, what matches — not a demographic stereotype.
  • Measured on the move — engagement, conversion and revenue effects are tracked with controls, so 'did the recommendation help' has a number and a comparison.
  • Relevant beats novel — the goal is the next useful thing, not the surprising one; a customer who pays rent wants the top-up card that fits their balance, not a teaser for a market they left.
  • Respect the attention — frequency and personalisation are bounded so the experience feels like a service, not a surveillance economy; restraint is a design decision, not a bug.
  • Transparent enough to be fair — the customer can see why something was offered and can refuse it; recommendation that must hide its reasons is usually recommending the wrong reasons.
  • The data is protected — the personalisation lives within the same permissioning as the rest of the customer's data; privacy is not traded for relevance.

The honest test of a recommendation engine is the one a payments platform applies to its own: did the recommended next action genuinely help the customer and the business, or did it just add noise to a screen? We build for the first and measure it to prove it.

17

AI and money: where the boundary is absolute

Because the studio runs a live payments platform, our AI discipline has a non-negotiable boundary at the ledger. AI may observe, summarise, classify, flag and propose across the money operation — and it may never, by its own imagination, move, promise or determine money:

  • Read, never invent — a customer's balance, a fee, a deadline, a status: these are read from the books by governed tools; no generated character in any answer is a financial fact unless the ledger said so.
  • Propose, never decide — the AI can suggest the next best action — 'flag this payout for review', 'this account matches the anomaly pattern' — and the decision and the dispatch remain in the human or the governed rule.
  • Support intelligence, not autonomy — the AI summarises the dispute, retrieves the policy, drafts the customer's options and triages the case for the person who resolves it; the resolution is theirs.
  • Fraud work is an assistant, not a judge — the anomaly detector surfaces candidates with evidence; the human decision and the audited action follow the platform's own rules, with the trail intact.
  • The evaluation includes the money cases — the golden tests for the assistant's money answers are the same golden tests the payment platform's own support would fail a human on; there is no separate, softer standard for the machine.
  • The box is a cage around the books — the AI's data access is scoped and its tools are gated exactly like any user role, because the quickest way to break a payment platform is through a privileged prompt.

The sentence we say to every client, without a smile that suggests otherwise: money is the one place where the AI's answer is never the final word — the ledger is. Every AI capability we build for a money operation inherits that boundary from the platform we run.

18

Safety, privacy and the responsible line

AI's risks are not a compliance checkbox; they are operational risks like any other, and they are engineered against like any other. The discipline covers the data that goes in, the outputs that come out and the people the system touches:

  • Data minimisation — the AI sees the minimum data the job needs, and personal and payment data are redacted, minimised and scoped before they reach a model; the model is not a licence to copy the whole world into a cloud.
  • Access parity — whatever a role can see through the app, the AI can see — and nothing more; the assistant inherits the permissioning, it does not bypass it.
  • Prompt-injection defence — untrusted content cannot instruct the model into privileged action, because the permissioning lives outside the model, in the tool layer and the gates.
  • Output accountability — every answer and action is logged and attributable, so a customer, a regulator or an auditor can ask 'why did the system do that' and get the trail.
  • Human review where the stakes are high — money, identity, legal commitment and public-facing claims keep a human in the loop by design and on the record.
  • The residual is disclosed — we tell clients what the system cannot do, what it can get wrong and how those risks are held, so adoption is informed, not aspirational.

The responsible line is not a slogan; it is the same treat-your-data-as-liability discipline a payments platform runs every day: the AI is a new member of the staff with the same access rules, the same audit and the same right to be wrong only where wrongness is cheap.

19

The Kenya reality: AI in our cost and context

AI advice written for California overshoots the Kenyan operation in every direction — costs, connectivity, language, data reality and what the work actually is. We build AI that fits the market it runs in, and we are blunt about the distance between the brochure and the road:

  • Costs hit hard currencies — token and API bills are priced in dollars while many businesses earn in shillings; the per-use arithmetic we do at the start is not theatre, it is survival.
  • Connectivity is real — the app, the assistant and the retrieval must perform on the connections average users actually carry — the AI is optimised for latency and for the offline-friendly paths, not for a fibre lab.
  • Languages and formats — Swahili, Sheng, English and angle-bracket SMS, the document format of Kenya: the system handles the languages the customers speak and the formats they send.
  • The data reality — many client records begin as paper, WhatsApp threads and spreadsheets; the readiness pipeline we run is built for that reality, not for a pristine warehouse that does not exist.
  • M-Pesa is the home-market context — the money questions an AI will be asked are the real ones — 'did my STK push go through', 'why is my payout pending', 'what is my balance' — and they take the same shape whether the money moved by M-Pesa, PayPal, Stripe, PayStack, card or bank transfer; the answers are read from the books per rail and spoken in the customer's language.
  • The value is in the work — collections, reconciliation, tenant management, support triage: the AI earns its place on the repetitive money-adjacent jobs that actually run Kenyan businesses, judged by the same jobs.

We have built and run AI-adjacent automation inside a Kenyan payments product — the reminders, the reconciliation reads, the support triage, the anomaly screens — and the lesson is consistent: AI helps most where the operation's discipline is already clear, and it fails fastest where the operation expects the machine to be the discipline.

20

Operating AI in production: the standing discipline

An AI feature is not finished at launch; it is a production system that drifts, costs and misbehaves like any other, and it is operated like one. The operations layer is what turns a promising deployment into a dependable one:

  • Cost monitoring per feature — the dashboard watches tokens, calls and infrastructure per deployment, so a runaway prompt or a usage spike is a flag on a board, not a shock at billing.
  • Latency budgets — the assistant answers within the budget the user experience demands, on real load; a slow answer is a churned customer, and it is monitored as such.
  • Model drift detection — evaluation decks run on schedule against the production model, and the day the scored answers start slipping is the day the board says so.
  • Feedback capture — the 'was this helpful', the human's correction and the escalation rate are collected as the tuning signal, so the system improves on evidence, not on vibes.
  • Versioned releases — the model, the prompts and the retrieval index are versioned and reversible; a change that hurts rolls back in minutes, like any release.
  • The kill switch stays armed — every deployment retains throttle, gate and stop controls, because the honest operator knows the day may come when the box must close fast.

The operating philosophy is identical to our payment rails: the machine works while someone watches, the failures are visible, the releases are reversible, and the answer to 'is it working' is a dashboard, not a hope.

21

Where we refuse AI outright

We refuse AI where it would be dishonest to sell it. The list is not a criticism of the technology; it is a statement of the trust a client is buying when they work with us — that the recommendation we make is the one that serves them, even when it is not the one that impresses:

  • Where the arithmetic cannot close — a feature whose token bill and drift risk exceed its measurable return gets the honest no, with the numbers on the table.
  • Where the data is not ready — an AI sitting on an ungoverned, uncurated pile will confidently answer from the mess; we fix the pile first or we do not build on it.
  • Where the wrong answer is unforgivable — immigration-adjacent legal advice, a medical judgment, a binding financial commitment: the boundary is the customer's life and money, and the AI is not the deciding layer there.
  • Where it would replace needed care — an assistant that lets a business stop listening to its customers is a downgrade wearing a modem; we say so, plainly.
  • Where the label sells but the work does not — 'AI-powered' with no mechanism behind it is marketing, and our clients are not paying us to costume their brand in it.
  • Where simplicity beats it — the rule, the search, the good form and the reliable human often beat a model; we ship the honest solution even when the word 'AI' would win the pitch.

There is a reason this section exists and is not short: the credibility of every 'yes' we give to AI depends on the 'no' we say elsewhere. The client who knows we decline the wrong ones can trust the ones we build.

The toolchain

The AI toolchain

The machinery behind AI that is grounded, evaluated, boxed and measured — the same patterns that keep a live payments platform safe, applied to the systems we build for clients.

stack.toolchain

01

Model gateway

The engines, chosen and controlled

  • LLM providersThe model engines, selected per task for quality, cost and latency — never defaulted.
  • Provider fallbacksAutomatic failover between models so an outage or a rate limit does not stop the feature.
  • Egress controlScoped network rules so models cannot be a channel for exfiltration or injection.
  • Token meteringPer-feature, per-query cost tracking recorded against the job the AI serves.
  • Capability choiceSmaller, cheaper, world-aware models chosen where they match — tuned where it pays.
  • Latency budgetsThe response-time targets the user experience needs, measured under real load.

02

Retrieval & grounding

Answers from your data, not imagination

  • Document pipelinesIngestion, chunking, cleaning and deduplication that turn paper piles into an index.
  • EmbeddingsSemantic representation of the corpus so similar meaning is found, not just exact words.
  • Vector storesFast similarity search over the organisation's own documents and records.
  • Hybrid searchKeyword and semantic retrieval combined, tuned per corpus for precision.
  • Re-rankingThe retrieved candidates ordered by true relevance before the answer is composed.
  • Citation wiringEvery answer carries its sources — the cited clause, the record, the ledger read.

03

Evaluation

Proving it works, not feeling it

  • Curated evaluation setsA bank of real questions with expected answers, scored by hand, kept current.
  • Golden ground-truth testsPinned money and safety answers checked on every release before anything ships.
  • Precision/recall scoringClassification measured on misses and false alarms, not on a single number.
  • Adversarial suitesPrompt injections, misleading questions and out-of-policy requests tested by design.
  • Regression decksStanding instruments that catch model or provider drift after launch.
  • Human samplingContinuous review of live interaction quality that feeds the deck and the tuning.

04

Application patterns

The shapes AI genuinely serves

  • Classification & routingTickets, documents and requests sorted and delivered to the right queue first.
  • Structured extractionContracts, receipts and forms read into records with confidence scoring.
  • SummarisationLong documents and dense cases compressed for the person who must decide.
  • Grounded assistantsConversational staff answering from documents and books, with sources and handoff.
  • Anomaly screeningBehavioural baselines that surface the transaction or the day that drifted.
  • Forecasting on historyPredictions backtested against reality, with bands and track records.

05

Safety & governance

The box around the machine

  • Permission scopingThe AI sees what the role may see and nothing more — parity, not privilege.
  • Redaction & minimisationPayment and personal identifiers reduced and removed before a model sees them.
  • Content moderationOutbound and inbound content checked against the brand's and the law's lines.
  • Prompt-injection defenceUntrusted content cannot steer privileged action; the gates live outside the model.
  • Money-tool gatesBalances read by governed tools; money-changing actions conditioned and logged.
  • Audit trailsEvery answer, action and decision attributable to the system that made it.

06

Deployment & operations

Shipping and running the box

  • Boxed deploymentsFeature flags, throttles and kill-switches on every model capability.
  • Versioned reasoningModels, prompts and indexes versioned and reversible like any release.
  • Cost dashboardsToken and infrastructure spend per feature, watched like a money path.
  • Drift monitoringScheduled evaluation against production so slipping answers surface early.
  • Feedback captureHelpfulness, corrections and escalations collected as the tuning signal.
  • Incident responseThe runbook for the box that misbehaves — throttle, gate, roll back, investigate.

07

Data & infrastructure

The ground the machine stands on

  • Data pipelinesThe cleaning, deduplication and structuring that make the ground trustworthy.
  • Platform databasesThe transactional records and ledgers the AI reads through governed queries.
  • Document storesThe original sources kept immutable and searchable for citation and audit.
  • Object storageThe documents, records and media backing the retrieval and extraction.
  • A/B instrumentationThe experiments that prove a change helped before it is kept.
  • Secrets managementProvider keys held and rotated the way every other credential is held.

Lifecycle

The AI lifecycle — from business case to boxed production system

AI is engineered like any other capability: costed, grounded, evaluated, shipped and operated. This is the lifecycle every AI build passes through, and the standard we hold our own platform to.

01

Cost the idea

The arithmetic first: per-use cost, build cost, pipeline cost and the value the feature must return.

02

Assess the data

Inventory what exists, what is clean, what is scoped and what must be fixed before any model matters.

03

Pick the honest approach

Decide whether AI is even the answer — or whether a rule, a search or a human serves better.

04

Choose the pattern

Classification, retrieval, generation or prediction — the capability that fits the problem, not the fashion.

05

Prepare the corpus

Clean, structure, deduplicate and index the documents and records the answers will come from.

06

Build the ground

Wire retrieval, citation and the tool layer so the AI reads the books, never invents them.

07

Set the box

Scope the permissions, gate the actions, control the egress and arm the kill switches.

08

Evaluate against gold

Curate the deck, score the baseline and require the measurements the feature must meet.

09

Rehearse the abuse

Run the injection suites, the adversarial cases and the dangerous requests before launch.

10

Ship boxed and watched

Deploy reversible, with cost tracking, latency budgets and human review loops live.

11

Operate and tune

Watch drift and costs, absorb feedback and improve on the evidence of real use.

12

Review the ROI

At the defined date, look at the real numbers — keep, tune or retire the feature on the record.

Closing

More than development

AI is a set of real capabilities — classification, prediction, generation and retrieval — and we build them the way a live payments platform requires: costed, grounded, evaluated, boxed and honest about their limits. That includes:

The business case done before the demo, with real per-use costs.Data readiness treated as a deliverable, not a precondition.RAG that answers from your documents and records, with sources showing.Money facts read from the ledger, never generated by the model.Fine-tuning deployed only where the evaluation says it pays.Evaluation decks, golden tests and regression runs as standing instruments.Hallucination risk engineered down and disclosed honestly where it remains.Boxed deployments with scoped permissions and gated tool use.Prompt-injection defence and egress control on every capability.Classification, triage and routing that cut queue time dramatically.Anomaly detection that flags the day that quietly went wrong.Document understanding that turns paper piles into searchable records.Assistants and copilots that escalate with the brief attached.Forecasting backtested against your reality, never sold on optimism.Recommendation and personalisation measured on outcomes, not impressions.An AI bound by the same access rules and audit as every other role.Cost dashboards, drift monitoring and kill switches in production.The honest no where the arithmetic, the data or the stakes say stop.The Kenya context: our costs, our languages, our connectivity, our M-Pesa.The discipline proven on a platform that moves real money every day.

The test of an AI build is not the fluency of its demo; it is whether the operation is cheaper, faster or more correct a quarter after launch — and whether the box still holds on the day the prompt goes off-script.

We treat AI as engineering, because that is the only treatment that survives contact with real money and real customers. When you deploy AI with us, it is costed like a feature, grounded like a ledger, and boxed like the platforms it runs on.

Previous capability

Digital Staff

Next capability

Data & Analytics

Building something like this?

The discipline above is what we run on our own products every day. If it would help on yours, our door is open.