Finding What Is Already in Use
Discovery done as a hunt produces hiding. Done as a question it produces an inventory and a requirements list.
Discovery
Finding what is in use
Four sources, used in the right order. Ask first; the technical ones confirm rather than catch out.
7 notes
Network and DNS Evidence
What the network tells you about AI tool use, how to read it, and the substantial part of the picture it misses.
Browser and Endpoint Evidence
Extensions, installed clients and logged-in sessions. Richer than network data and closer to the line you should not cross.
Expense Claims and Card Data
The source nobody thinks to check, which finds the tools people cared enough about to pay for.
Asking People Directly
The source that finds what the technical ones cannot, and the conditions under which people answer honestly.
The Inventory, and Keeping It Current
What the list should contain, what it should not, and why it goes stale faster than any inventory you have kept before.
What Discovery Will Not Find
The blind spots are structural rather than fixable. Knowing them prevents the dangerous conclusion that you have a complete picture.