# basenull > AI's missing operational layer. Governance, security, observability, and workforce enablement for IT teams running AI in production. Basenull AI Ops ships purpose-built tools for the IT executive whose org is already running AI in production. Each product solves one problem the AI rollout playbook hand-waves over — adopt the ones you need; the rest stay out of your way. ## Shipped products - [ai-bom](https://basenull.com/products/ai-bom): The AI Bill of Materials for your GitHub org. Every agent, MCP server, and model dependency in one shareable report. - [ai-act-check](https://basenull.com/products/ai-act-check): EU AI Act self-assessment for deployers. Classify any AI system in five minutes, track the evidence auditors will ask for. - [Prompts](https://basenull.com/products/prompts): Your team's AI prompt library. Personal or team-wide. Fill the variables, deep-link into ChatGPT, Claude, Copilot, or Gemini. - [llms-txt](https://basenull.com/products/llms-txt): Hosted llms.txt for your site. We crawl, refresh on a schedule, and email you when the content drifts. - [polls](https://basenull.com/products/polls): One-link polls — decide anything as a team. Free anonymous create. Pro $5/mo for unlimited and private polls. - [md](https://basenull.com/products/md): A WYSIWYG markdown editor for everyone who's not a developer. Type, format, export beautiful PDFs. Mermaid diagrams render inline. - [MCP Watch](https://basenull.com/products/mcp-watch): Monitor your MCP server supply chain. Alerts when third-party tools change, are added, or removed. - [MCP Inspect](https://basenull.com/products/mcp-inspect): Hosted inventory of every MCP server in your stack. Inspect capabilities, share with security review. - [Agent Check](https://basenull.com/products/agent-check): Process monitoring for AI agents. Define a workflow, watch your agent run it, get alerted when it skips a step. - [Agent Talk](https://basenull.com/products/agent-talk): Your Claude Code talks to your colleague's Claude Code. An MCP-native channel between two AI workspaces — status updates without status meetings. - [skills](https://basenull.com/products/skills): Workforce AI literacy assessment. Role-tailored questions, 8-axis spider chart, personalized feedback. The board-grade artifact your CHRO has been promising the CEO. - [exec-brief](https://basenull.com/products/exec-brief): A weekly 5-15 report tool for executive teams. Your directs write theirs in ten minutes. You get one synthesized briefing every Friday — decisions, blockers, KPIs, cross-team themes, week-over-week deltas. - [okr](https://basenull.com/products/okr): OKRs from your Claude Code workspace. MCP-native check-ins, parent-child objectives, weekly columns in the table view. ## Roadmap - [Data Quality Guard](https://basenull.com/products/data-quality) (coming soon): Wrap your data sources before your AI agent reads them. AI-generated quality checks that prevent agent hallucinations on bad data. - [Token Meter](https://basenull.com/products/token-meter) (coming soon): Drop-in token billing API for indie AI products. Topup, deduct, balance — with webhook alerts on low budget. ## Blog - ["Are we doing AI right?" deserves a better answer than a demo.](https://basenull.com/blog/ai-operational-scorecard): Every board is asking the question. Most CIOs answer with adoption numbers and a well-rehearsed demo — which answers "are we doing AI" and says nothing about "right." Here are five operational dimensions you can actually score, and what red, yellow, and green look like on each. - [Your agents pass their evals and still break your processes.](https://basenull.com/blog/agent-evals-process-conformance): Eval scores measure whether the model produced a good answer. Production incidents are almost never about bad answers — they're about skipped approvals, missing audit entries, and steps executed out of order. Task success and process conformance are different properties, and only one of them is on your dashboard. - [The MCP server you approved is not the MCP server you're running.](https://basenull.com/blog/mcp-server-drift): Security review signed off on the MCP server in March. It's July, and the server has shipped four updates since — new tools, widened schemas, rewritten descriptions — none of which anyone re-reviewed. A point-in-time approval of a surface that mutates continuously is not a control. It's a memory. - [Every MCP connection is a service account no one provisioned.](https://basenull.com/blog/mcp-connection-identity): MCP connections behave like long-lived service principals — broad scope, no owner, no expiry, no review. IAM teams spent a decade learning that lesson once. The agent stack is unlearning it in real time. - [The AI supply chain stopped being about model providers.](https://basenull.com/blog/mcp-supply-chain-inventory): When your team connects an MCP server to Claude or ChatGPT, third-party tools, prompts, and resources land directly in a model's working memory. That's a software supply chain — and almost no one is inventorying it yet. - [Your AI agents act in production. The audit trail does not.](https://basenull.com/blog/agent-audit-trail): Agents now ship code, file tickets, send email, move money. The systems they touch keep their usual logs — but the agent's reasoning, the tools it considered, and the version of the prompt it was running rarely make it anywhere durable. That gap is where the next class of incidents will be diagnosed, after the fact, with no data. ## Optional - [basenull labs](https://labs.basenull.com): Sub-brand for rapid product output. Real apps, in production, priced for humans — distinct from the enterprise AI Ops stack here. - [llms-full.txt](https://basenull.com/llms-full.txt): Same index plus full blog post bodies inlined for retrieval. - [Contact](mailto:hello@basenull.com): Volume pricing, SAML/SSO, procurement support, and security review packets. - [@basenull](https://x.com/basenull): Twitter / X.