The executive issue
Gartner's first Hype Cycle for Agentic AI, published in 2026, places agentic AI at the Peak of Inflated Expectations, reflecting extraordinary market attention and aggressive adoption intent. Gartner says the focus is now shifting from initial excitement about AI agents to a deeper understanding of how agentic AI technologies are maturing.
That shift, from expectation to real deployment, is where adoption succeeds or stalls. Yet most enterprises track AI adoption the way they track any IT rollout: by organization and role, with the CIO's office driving the program. Licenses are issued by department, training is counted by function, and economic value is rolled up by business unit.
IT plays the good shepherd in this model, but it can miss what is actually driving the flock to adopt AI. Which is trust, the common variable that connects them all. A marketing manager chains prompts to generate campaign content and sequencing, and ships it with little review: deep use, high trust. Down the hall, a cybersecurity chief can't trust any of the compliance documentation that app owners submit, because the documents were created with the same AI tool the owners used to build their applications: little use, low trust, and for good reason. Same tools, same program, opposite behavior. In the terms used below, the marketing manager is an Explorer and the cybersecurity chief a Skeptic, and neither shows up on an org chart. Behavior, often masked by change management, becomes the most important driver of AI adoption. What shapes that behavior is how deeply someone uses AI, and how much they trust what it produces.
The marketing manager looks like an enthusiastic adopter and the cybersecurity chief like a resistant one, yet the chief may be exercising exactly the judgment the enterprise needs. That distinction becomes critical as organizations move from AI-assisted content to AI-assisted decisions and agentic systems that execute actions. AI adoption is influenced by human behavior, but AI decision authority must not be determined by human confidence alone.
This article looks at four common AI behavioral personas, how each one speeds up or slows down adoption, how to manage those behaviors to reach your adoption objectives, and how WEKID™ connects adoption to evidence-based governance.
Full article: 14-minute read · Short on time? Go straight to what to do on Monday →
The importance of enterprise personas
The idea of a persona that cuts across job titles is older than AI, and even older than enterprise IT. In 1959, management thinker Peter Drucker identified the knowledge worker in his book The Landmarks of Tomorrow. He was describing a structural shift in the economy. Manufacturing and farm work were declining in Western economies, while white-collar, technical and service work expanded. Early automation and computing were taking over routine manual and clerical tasks, and organizations needed educated people who could apply analytical frameworks to information rather than operate machinery. Economists such as Fritz Machlup soon set out to measure how large this knowledge economy had become.
Drucker also saw a change in where enterprise value came from. Under industrial management, in the tradition of Frederick Taylor, managers designed the process and workers executed it with the company's equipment. For the knowledge worker, the means of production moved to the individual: it lived between the worker's ears. That is why Knowledge worker became a persona rather than a job title. It described how people worked, whether they were analysts, managers, engineers or finance staff. Decades later, enterprise IT used the same persona to set device and application policies once for everyone who worked that way, instead of job title by job title.
AI adds something Drucker's knowledge worker, and the enterprise technologies that followed, never had to manage: a tool that produces judgments of its own. Nobody worried about losing control of their database, or that their mobile device would decide something on their behalf. AI can, and people respond to that personally, with excitement, anxiety and over-trust, followed by distrust and refusal. That human response is new, it bubbles up through every role, and it is why a role and a work persona are no longer enough on their own.
AI adoption requires the same application of the role and work persona, coupled with the behavioral personas:
| Layer | Answers | Example | Set by |
|---|---|---|---|
| Role | What is your role? | Chief Engineer | HR and the org chart |
| Work persona | What are you responsible for when AI is involved? | Field operator: acts on AI alerts in live operations | The adoption program |
| Behavioral persona | How do you use and trust AI? | Skeptic: low use, low trust | How the person actually works |
| Decision authority | What may AI recommend, stage or execute? | AL-2: a person approves before action | Evidence, consequence and policy |
Roles create the right basis for access: what data and systems someone may touch. Personas are the right basis for guidance, training and risk prompts. None of them, on its own, decides what AI is permitted to do; that is the job of decision authority, covered later in this article.
A job title tells you what someone may access. It tells you nothing about how far they trust what the model just wrote.
Four common AI behavioral personas
Two questions allow you to sort your user community by persona: how deeply do they use AI, and how far do they trust what it produces? Baker Tilly describes three behavior-based groups (Pioneers, Explorers and Consumers), defined by comfort, curiosity and confidence rather than job title. Most other published models add a fourth: the Skeptic, who uses AI little and trusts it less. BCG calls this group the Cautious Skeptic, Microsoft lists AI Skeptics, AIHR the Skeptical Avoider, and Asana's research found 41% of employees skeptical about using AI at work.
Treat these personas as a planning heuristic, not a clinical classification, a validated risk score or a permanent description of an employee. They are not mutually exclusive or fixed: the same person may be a Pioneer when drafting code and a Skeptic in regulatory reporting. Confidence is also not the same as competence. A cautious specialist may be right to reject an unsupported AI output, while an experienced user may still over-rely on one.
How each persona shapes adoption
Each persona helps adoption in one way and puts it at risk in another. One program-wide policy will be too loose for some groups and too strict for others.
| Persona | Helps adoption by… | Puts it at risk through… | What helps them |
|---|---|---|---|
| Pioneer | Finding new uses, building tools and agents, showing what is possible | Shadow IT: unapproved APIs, data stores and unsandboxed code | Sanctioned sandboxes, a managed product lifecycle, and roles as pilot leads |
| Explorer | Spreading AI across teams through everyday use of approved tools | Restricted data uploaded to shared tools; analysis relied on before it is checked | Clear data classification, evidence habits, and peer review when analysis drives a big decision |
| Consumer | Making AI routine once it is built into familiar tools and workflows | Unchecked output copied into customer-facing or official material | Embedded features, simple verification steps before anything leaves the team, short task-based training and acceptable use policies |
| Skeptic | Catching errors and keeping manual fallbacks alive | Opting out, or working around AI tools, so adoption stalls | Visible evidence, an easy route back to the manual process, and a role in testing |
Two patterns follow:
- Trust, not skill, decides the type of risk. Low-trust users slow adoption down but rarely cause harm. High-trust users speed it up and are where unchecked output escapes.
- People move between personas. Baker Tilly notes that users shift as their comfort and confidence grow. A Consumer given good embedded tools can become an Explorer over time, so the program's job is to move people safely, not to sort them.
Behavior on top of responsibility
Mobile adoption offers an excellent enterprise reference point. Enterprise mobility programs segmented people by work persona, such as desk-based knowledge workers, field technicians, frontline staff and executives on the road, because the work decided which device, apps and security each person needed. But behavior decided the pace. Early adopters brought their own devices before any policy existed, while others held on to the desktop. Programs that planned for only one of the two either locked down their enthusiasts or under-equipped the field. AI will play out the same way, with higher stakes.
Behavior alone isn't enough to plan adoption; what someone is responsible for still matters. A Pioneer drafting marketing copy and a Pioneer automating changes to a cooling system need different guardrails. Combining the work persona with the behavioral persona gives the guidance its focus. Three examples from data center operations:
| Work persona | Behavioral persona | What to emphasize |
|---|---|---|
| Field operator for example, a chief engineer | Skeptic | Show the evidence behind each AI alert, keep manual fallback and stop-work procedures visible, and involve them in testing new tools. Their skepticism is an asset at the point of action. |
| Analyst for example, a sustainability analyst | Explorer | Trace every AI-produced figure back to metered source data before it reaches a report or a public claim. High trust plus external reporting is where errors become reputational. |
| AI-assisted creator for example, a design engineer | Pioneer | Give them a sanctioned environment for the tools they build, and keep a named engineer of record signing off AI-generated drawings and schedules. |
The work persona says where the consequences fall. The behavioral persona says how likely it is that something goes unchecked. Together they show where to spend training and review effort.
Adoption behavior is not decision authority
As AI use matures, enterprises should distinguish three increasingly consequential activities:
| Activity | Example | Governance focus |
|---|---|---|
| AI-assisted work | Drafting a maintenance summary | Acceptable use, confidentiality, factual checking |
| AI-assisted decisions | Recommending an equipment maintenance priority | Evidence provenance, independent review, accountable approval |
| Agentic execution | Changing a live operating parameter through a connected tool | Authorized scope, deterministic gates, operational enforcement, audit |
More use does not automatically mean more risk, and less trust does not automatically mean greater safety. Consequence depends on the workflow, the quality of the evidence, the controls available and what the system is permitted to do. Work context determines consequence; behavioral patterns help tailor support.
What WEKID adds
Knowledge work has always run on two kinds of evidence. Some of it is documented: data, records, reports and procedures that an AI system can read. The rest is cognitive, the judgment Drucker located between the worker's ears. It is knowing which alarm matters on this site, which customer commitment is binding, and which number looks wrong. AI handles the first kind well. It has no direct access to the second.
Each behavioral persona meets that gap differently. Consumers and Explorers tend to accept documented output as if the judgment came with it. Skeptics, like the cybersecurity chief, reject it because they can't see the judgment behind it. Pioneers build systems that act on documented evidence alone. Adoption speeds up or stalls depending on which of these reactions dominates.
WEKID™ makes that gap visible. Documented evidence maps to the lower layers of the Epistemic Maturity Model: Data, Information and Knowledge. Cognitive evidence lives in the upper layers. Experience is demonstrated performance in the real operating context, and Wisdom is judgment about consequence, legitimacy and accountability. When AI takes over part of a knowledge worker's job, the documents usually come with it, but the Experience and Wisdom often stay behind with the person.
The deeper thread is authority. Each behavioral persona quietly shapes how much authority AI ends up with, and left alone, behavior drives decisions toward the extremes. Pioneers build agents that act. Consumers grant AI autonomy in practice by trusting output nobody checks. Skeptics keep every decision with people, even where the evidence would support delegating. None of these positions is chosen; each one emerges from habit.
That is also where adoption is won or lost. Unclear authority stalls adoption from both ends:
- Skeptics won't move until they can see why delegating is safe. The cybersecurity chief who can't trust AI-written compliance evidence ends up saying no to everything.
- Pioneers move anyway, outside sanctioned channels, until an incident triggers a clampdown that stops everyone else too.
- Consumers adopt fastest and least visibly, so one bad output can reset trust across a whole function.
- Explorers spread AI widely but unevenly, with no shared rule for when their analysis can be relied on.
In every case, the persona sets the pace of adoption by deciding, informally, how much authority AI gets.
WEKID replaces habit with a determination. Traditional adoption programs ask whether employees trust AI. WEKID asks a different question: what evidence would justify reliance on this output, or delegation of this action?
The Epistemic Maturity Model examines the evidence across all five layers. The Trust Bridge then applies approved calibration and evidence gates to set the maximum AI delegation that evidence supports. It is a deterministic admission ceiling, not a grant of permission. The AI Decision Authority Model separately applies consequence, risk and enterprise policy to determine the permitted Authority Level. Finally, the application or action gateway that executes the action must enforce that determination before anything consequential happens. Authority is set by evidence, not by enthusiasm or caution.
Each step toward machine autonomy has to be earned, from constrained support (AL-1), through a person approving before action (AL-2), to bounded autonomy within an approved scope (AL-3). That includes the Experience and Wisdom evidence that documents alone can't supply. Some decisions never move: where policy, law or safety reserves a decision to an accountable person (AL-4), stronger evidence never hands it to a machine.
| Authority Level | Practical meaning |
|---|---|
| AL-0 | No reliance: no authorized AI decision or action within the governed scope |
| AL-1 | Constrained assistance; an accountable person keeps decision control |
| AL-2 | An AI-proposed action needs explicit human approval before it is executed |
| AL-3 | Bounded autonomous action within approved constraints and enforcement gates |
| AL-4 | Reserved human authority; not a higher degree of machine autonomy |
A concise summary for executives. Formal implementation follows the current WEKID specification and sector calibration.
| Persona | Pulls authority toward… | What WEKID requires | Effect on adoption |
|---|---|---|---|
| Pioneer | Machine autonomy, through the agents and automations they build | Authority earned layer by layer, and enforced at the system that takes the action | A legitimate path to more autonomy keeps their innovation inside sanctioned channels |
| Explorer | Reliance on AI analysis in consequential decisions | Information and Knowledge evidence that a reviewer can inspect before anyone relies on it | Inspectable evidence lets their analysis scale from one team to many |
| Consumer | Autonomy nobody decided on, through unchecked trust | An explicit Authority Level, and Experience evidence rather than habit | Trust is set deliberately before negative incidents erode it |
| Skeptic | Human autonomy, even where the evidence supports machine or agentic delegation | Evidence that shows where delegation is safe, with AL-4 kept for decisions that are truly reserved | A visible reason to say yes. WEKID records how independent each piece of evidence is, so AI-written compliance documents are not mistaken for independent assurance |
In practice, AI-generated compliance text remains AI-generated text for the cybersecurity chief, not independent evidence of control effectiveness. For the marketing manager, factual claims must meet the relevant verification requirements before publication. And for an agent controlling equipment, the host system must refuse actions outside the approved authority, however confident the agent or its user may be.
That is the balance WEKID creates: a shared, inspectable account of how far a decision may move toward machine autonomy, and exactly what evidence it would take to move further. For adoption, it changes the conversation. The question stops being "do we trust AI?", which each persona answers differently, and becomes "what evidence would justify the next level?", which every persona can work on together.
Behavior influences adoption. Evidence sets the delegation ceiling, policy determines permission, and operational systems enforce it.
Use personas without labeling people
The obvious next step is to score every employee and tag them Pioneer or Skeptic. That's just not going to work. A recorded behavioral profile describes an individual. It raises questions for HR and clear privacy concerns: who sees it, how long it is kept, and whether it could ever affect performance reviews or access. And people who know they are being classified answer for the classification they want, not the one that fits.
Behavioral personas are not fixed personality types. The same employee may be a Pioneer when experimenting with AI for a familiar task, an Explorer when learning a new application, or a Skeptic when the consequences of an error are significant. These personas describe how people approach AI in a particular context, not who they are.
The four personas are a practical framework for understanding AI adoption behavior, not an empirically validated psychological classification. Their purpose is to help organizations recognize patterns, identify barriers, and design more effective adoption programs—not to diagnose individuals or predict their behavior with certainty.
Recognize that employee behavior is shaped by change management. But don't abandon the idea of behavioral personas; use them where they work best: designing the program.
- Measure in aggregate. Run voluntary, anonymous pulse surveys on trust, error tolerance and depth of use. Report results by team or function, never by name, and only for groups large enough that no combination of answers could identify a respondent.
- Design for all four. Every rollout should include something for each persona: a sandbox, an evidence habit, a verification step and a fallback route.
- Let people self-select support. Offer tracks such as "I want to experiment", "Help me verify outputs" and "Show me approved everyday uses". People choose by need, and no persona is attached to a personnel record.
- Separate training from access decisions. Assign privileges based on role, policy, workflow and verified competency, not on an inferred persona.
- Engage HR, privacy and security early. Define the survey's purpose, who can see results, how long they are kept and the limits on secondary use before collecting any data. Until then, keep tools focused on roles and responsibilities.
In practice, behavioral personas belong in the adoption strategy, while roles and responsibilities belong in the governance tooling.
An enterprise operating model
Personas become valuable when they shape a coordinated program rather than another dashboard. The enterprise needs clear owners for adoption, assurance and decision authority.
| Owner | Action | Useful measure |
|---|---|---|
| AI adoption / Center of Excellence | Offer task-based learning, safe experimentation and anonymous baseline surveys | Verified task adoption, proficiency and employee confidence |
| CIO / IT | Provide approved AI services, a managed product lifecycle and secure integration patterns | Approved use cases, sanctioned deployments, shadow-AI findings |
| CISO / Risk | Define evidence, information-protection and independent validation requirements | Control coverage, verified outputs, remediation of findings |
| AI Governance Council | Approve authority policy, risk boundaries, exceptions and escalation routes | Authority determinations, exceptions and auditability |
| Business and operational owners | Identify consequential workflows and accountable decision owners | Quality, cycle time, outcomes and incident rates |
These responsibilities have to work together. The adoption team can encourage experimentation, but it cannot waive enterprise evidence gates. The governance team can set the rules, but it should not mistake low tool usage for poor performance, or responsible skepticism for resistance.
What to do on Monday
- Start with a voluntary, anonymous survey of your user community. Ask about two things, and report the results by team or function, never by name:
- Role and work. What people do and what they are responsible for when AI is involved, so roles can be mapped to a small set of work personas. Ten is plenty; add new roles as mapping rows, not new personas.
- Behavior. How deeply people use AI for specific tasks, how far they trust its output, how they verify it, and what gets in their way. The baseline shows whether you are mostly Consumers, with output-checking risk, or mostly Pioneers, with shadow-IT risk.
- Select three workflows. Include one low-consequence assistant use, one consequential recommendation and one proposed agentic action. Name the business owner and the decision at stake for each.
- Match support and controls to each persona. Sandboxes and a managed product lifecycle for Pioneers, data classification and guided experiments for Explorers, embedded verification for Consumers, and inspectable evidence plus fallback routes for Skeptics.
- Map evidence to authority. For each consequential workflow, identify the evidence required, the Trust Bridge ceiling, the policy-constrained Authority Level and the system that enforces it.
- Put Skeptics to work. Invite skeptical domain specialists into structured testing and review. Their instinct to find errors is the cheapest assurance you have, but it does not replace independent assurance or validated controls.
- Measure outcomes, not just activity. Track verified quality, business value, approved deployments, exceptions and incidents alongside adoption and training metrics.
- Re-survey as tools change. Every new embedded AI feature turns some Consumers into Explorers, and the risk profile moves with them.
The close
Management practice took decades to catch up with Drucker's knowledge worker. Companies first ran knowledge work the way they had run the factory floor, and learned slowly that the value sat with the person rather than the process. AI adoption is at a similar point. Most programs are still measured by token usage and department budgets because that is what the org chart can see. The org chart remains the right place to define roles and decide who may access what, but it was never designed to show how someone feels about a tool that can make decisions on their behalf.
Think back to the two people at the start of this article. The marketing manager will keep publishing AI-generated campaigns until one of them goes wrong. The cybersecurity chief will keep rejecting AI-written compliance documents until someone can demonstrate that the material is real and independent. A training module won't change either of them, and neither will a new license tier. What changes their behavior is a record they can both read: what the AI output rests on, who checked it, and how much decision authority it has been given.
WEKID was built to provide that record. It describes the evidence behind an AI output across all five layers, from the data it drew on to the experience and judgment it still needs from a person, and it ties that evidence to a single scale of authority. For the cybersecurity chief, AI-generated documentation is recorded as exactly that, rather than passed off as independent assurance. For the marketing manager, a claim is checked before it reaches a customer. When people with very different attitudes to AI can look at the same record and agree on what the system has earned, adoption can move as fast as the evidence allows.
As AI moves from generating text to recommending decisions and executing actions, enterprise leaders have to manage two separate questions. How do we help people use AI effectively? And what may AI be permitted to do? Behavioral personas help answer the first. WEKID's evidence, authority and enforcement model helps answer the second.
Adopt by behavior. Govern by evidence.
Sources
Framework documents
- WEKID LLC, Standards Catalogue (WEKID-STD-001 v1.2; WEKID-STD-002 v1.1), 2026.
- WEKID LLC, The two-model framework, 2026.
Historical foundations
- Drucker, P. F., The Landmarks of Tomorrow, Harper & Brothers, 1959. First use of "knowledge worker".
- Machlup, F., The Production and Distribution of Knowledge in the United States, Princeton University Press, 1962.
Industry analysis
- Gartner, What the 2026 Hype Cycle for Agentic AI Reveals, 2026.
Persona research
- Baker Tilly, How User Personas Accelerate Gen-AI Adoption, via 3BL Media. Pioneers, Explorers and Consumers.
- BCG, The AI Adoption Puzzle: Why Usage Is Up but Impact Is Not, December 2025. Five personas, including the Cautious Skeptic.
- Microsoft Viva, Research Drop: AI transformation profiles. Five profiles, including AI Skeptics.
- AIHR, Which AI Adoption Persona Are You in HR? Four personas, including the Skeptical Avoider.
- Asana Work Innovation Lab, AI mindsets. AI enthusiasts and AI skeptics; 41% of employees skeptical about using AI at work.
Workforce surveys
- Salesforce with YouGov, What leaders should do about American workers' AI skepticism. 53% of desk workers in the US, UK and France self-identify as AI skeptics.
Editorial notes
The four-persona synthesis, the depth and trust axes, the authority spectrum, the examples and the proposed operating model are the author's interpretive guidance, drawn from AI adoption planning work. They are not a validated employee risk taxonomy. The Authority Level descriptions are a summary for explanatory purposes; the published WEKID specification governs their formal interpretation.