The Workforce AI Governance Needs Is the Workforce AI Deployment Is Removing
IBM and Red Hat's Project Lightwell commits to AI-powered open source security and explicitly requires a global force of human engineers to staff it. The workforce being displaced by AI coding agents is the workforce Lightwell needs. That's not irony. It's the load-bearing problem nobody in either policy conversation is naming directly.
Wired documents bug bounty payouts nearly doubling between 2019 and 2024 because LLM code comprehension finds vulnerabilities faster than human researchers do. The same models are flooding disclosure programs and compressing the economics of human security work. The capability driving AI coding adoption and the capability accelerating the displacement of security researchers are the same capability.
The administrative side runs the same dynamic. Healthcare claims processing, oncology workflow management, manufacturing inspection: AI deployments justified explicitly by the one-to-two year training burden of the humans they replace. OpenAI's own frontier AI regulation paper proposes supervisory authorities and third-party assessment bodies as governance mechanisms. Both require exactly the category of trained domain professional the deployment economics are removing.
The human operator's slowness isn't just a cost. It's an error-detection interval. The judgment call before escalation, the anomaly flag that goes up a chain: that function doesn't get automated away cleanly. It gets eliminated, and the governance product gets installed alongside the gap where it used to be.
The alignment community is building licensure regimes and assessment infrastructure that takes years to produce. The deployment wave consuming the people who would staff those institutions is already underway. Domain experts aren't interchangeable with generalist oversight bodies. They take time to train, and training pipelines respond to labour market signals. The signals right now point the wrong direction.
Every quarter of deployment at current rates narrows the available talent pool a regulatory intervention could call on. The two policy conversations are treating this as a sequencing problem. It isn't. It's a simultaneity problem, and simultaneity has a much shorter window.