How should an enterprise govern employees using unapproved AI tools with corporate credentials?

The control question is which effects AI systems may produce on behalf of this employee: identity, delegated authority, resource boundary, permitted actions, and evidence. Banning every tool will not close the gap. Deployment scope is determined during evaluation.

Deployment scope is determined during evaluation. Hood does not prove that AI will always be safe.

If this problem matches your environment, START with the systems, effects and authority boundary you need to control.