NEWAI Brain Fry Fix — The 3-Layer Stack Method$19 AUD →

Agentic Services — Build vs Buy

Hire RFE for AI agent governance, or build it in-house?

If your team has engineers, the in-house question is legitimate. This page works through the real trade-offs: what each path actually costs, how long it takes, and what you own at the end.

Why teams ask this question

Most teams that arrive at this page already have engineers. They are not asking whether they could build AI agent governance internally — they are asking whether they should. The answer depends on three variables: how long can you absorb a build timeline, what does the expertise gap actually cost, and what do you need to own permanently?

Both paths are legitimate. The question is which one fits your timeline, budget, and internal capacity right now — not which one is objectively better.

The two paths at a glance

Before the detailed comparison, here is what each path delivers and what it requires of your organisation.

Specialist engagement

Option A

RFE Agentic Services

A productised governance engagement run by a team that operates a 10-agent production fleet. RFE has already hit the failure modes your agent will hit and has documented controls showing what governance looks like after hardening.

  • 2–3 week engagement from discovery call to handoff
  • Production controls installed, not just recommended
  • First-party evidence from a live agent fleet
  • Reusable audit worksheet your team inherits
  • From $2,500 AUD (Single-Agent Audit)
Best for: teams with a working agent that needs production governance in weeks, not quarters.

Option B

In-House Build

Your engineering team designs and implements the governance layer from scratch. Full IP ownership, deep system context, and permanent internal capability — at the cost of time, iteration, and discovery through trial and error.

  • 3–18 months to mature governance (team-dependent)
  • Requires AI governance expertise on payroll or a deliberate hire
  • Full ownership: code, patterns, policy
  • High iteration cost through discovery of unknown unknowns
  • $80,000–$500,000+ AUD per year (salaries, tooling, incident cost)
Best for: orgs with AI engineering capacity and a strategic priority to own the capability permanently, with timeline to match.

Side-by-side decision matrix

The matrix below compares the two paths across dimensions that matter when deciding now. Advantages reflect genuine structural differences, not marketing claims.

Dimension RFE Agentic Services In-House Build
What you are buying Production governance controls, installed and documented Internal engineering capacity and ownership of the build
Time to production controls 2–3 weeks from discovery call 3–18 months (varies by team size and expertise)
Indicative cost $2,500–$18,000+ AUD $80,000–$500,000+ AUD per year (team + tooling)
Expertise source First-party: built from running a 10-agent production fleet Accumulated through your own trial and error in production
Agent-specific governance depth Deep from day one — authority scoping, approval gates, audit trails, rollback paths As deep as your team builds it, discovered over time
Unknown-unknown cost Low — RFE has already discovered the hard governance problems for you High — teams typically discover them through incidents in production
Who implements RFE, then hands off to your team with documentation Your team (full ownership from day one)
Ongoing internal capability built Moderate — team inherits documented controls and a reusable audit worksheet High — permanent capability on payroll
What you own at the end Documented controls, audit worksheet, risk register your team operates independently Full capability — code, governance patterns, policy, institutional knowledge
Ongoing RFE dependency None — the engagement hands off a system your team owns and can extend None — you own everything
Risk if wrong fit Low — scoped engagement, no ongoing commitment required High if team lacks the expertise — timeline and cost overrun is the dominant failure mode

The real cost of building in-house

The in-house build cost calculation almost always starts with the same items and misses the same ones. Here is what both paths actually cost across a 12-month horizon.

RFE engagement — 12-month total

  • Discovery call → audit → hardening → handoff: $2,500–$18,000 AUD
  • Timeline: 2–3 weeks to production controls
  • Incident cost during governance gap: near zero (controls in place before incidents occur)
  • Internal time to manage engagement: ~3–5 hours total
12-month cost: $2,500–$18,000 AUD

In-house build — 12-month total

  • 1 engineer with AI governance focus: $120,000–$200,000 AUD (salary)
  • Time to hire: 2–4 months (role is a niche skill)
  • Tooling, infrastructure, and testing overhead: $10,000–$40,000 AUD
  • Incident cost during the build period: variable (commonly 3–6 production incidents before governance matures)
  • Team context overhead: significant — the engineer needs to learn your agent’s system before building controls
12-month cost: $130,000–$240,000 AUD (before incident cost)

The salary range above is a directional anchor, not a quote. The more important number is the one rarely counted: the cost of production incidents during the 3–18 months before governance matures. Those costs arrive as real damage, not budget line items, which is why they are usually absent from the in-house build case.

Where building in-house genuinely wins

The in-house path is the right answer for some organisations. Three situations where it is clearly the better choice:

You have AI engineering on payroll now

If you have engineers who already understand production agent systems, the gap between what they know and what governance requires is much smaller. The build timeline compresses, and the institutional knowledge you accumulate is permanently on payroll.

Your agent fleet is large enough to warrant permanent staff

At three or more production agents, a dedicated internal governance function starts to pay for itself. The economics change when governance is not a one-time problem but an ongoing operational discipline.

IP ownership is a strategic requirement

If your governance layer is a competitive differentiator — for example, a regulated industry where your audit trail architecture is a compliance asset — owning it completely, including the institutional memory, may outweigh the cost and timeline of the build.

You can absorb the timeline without production risk

In-house builds work well when the agent is not yet in production, the stakes of trial-and-error incidents are low, and the team has time to build governance without pressure. When the agent is live and the risk is real, the timeline cost changes the calculation.

If more than one of these conditions applies to your situation, an in-house build is worth serious consideration. If none of them apply, the RFE engagement closes the gap faster and at a fraction of the cost.

What you actually own at the end of each path

The ownership question is often the deciding factor. Both paths leave you owning something — the substance of what that is differs significantly.

After an RFE engagement

  • Documented production controls specific to your agent and authority model
  • Authority model and blast-radius map you can maintain and extend
  • Risk register ranked by severity and residual exposure
  • Reusable audit worksheet your team applies independently going forward
  • Launch-readiness checklist for future agent deployments

After an in-house build

  • Full internal capability: code, governance patterns, and policy
  • Deep institutional knowledge specific to your system
  • Engineers who can extend the governance layer as the agent evolves
  • No dependency on any external party for changes or extensions
  • A permanent team function that can govern new agents as you build them

First-party evidence: what governance controls actually produce

The RFE engagement is built on patterns pressure-tested on our own production infrastructure. Every control in the engagement reflects a real failure mode found in a live fleet.

Sterling: 3 production incidents to delta-65 reasoning

Sterling, RFE’s chief operating agent, scored 79/100 on standard evaluation before hardening. Three incidents in the first 24 hours of live operation exposed the governance gap. After six targeted hardening controls, IRO delta moved from 44 to 65 — genuine task reasoning, not rubric gaming.

Read the Sterling case study →

Vanessa: source-grounding controls in a live research agent

Vanessa, our research and signal-detection agent, carries the highest hallucination risk in the fleet. A source-grounding audit exposed citation drift between what Vanessa claimed and what cited sources supported. Controls installed after the audit reduced that drift measurably.

Read the Vanessa case study →

Which path fits your situation?

Use these profiles to identify where you land. The overlap case — where both fit — often resolves as a hybrid: start with RFE to close the immediate governance gap and get documented controls, then build permanent internal capability from that foundation rather than from scratch.

RFE fits if…

  • You have a working agent in or near production
  • Your governance gap is specific: authority scope, approval gates, audit trails, rollback paths
  • You need controls in place within weeks, not quarters
  • Your team is small or does not have a dedicated AI governance function
  • Budget is $2,500–$18,000 AUD for the engagement
  • You want to own the controls at the end without ongoing RFE dependency

In-house fits if…

  • You have AI engineering capacity on payroll now
  • Permanent internal capability is a strategic priority
  • You can absorb a 3–18 month build timeline without production risk
  • Your agent fleet is large or complex enough to warrant dedicated governance staff
  • Governance IP ownership is a competitive or compliance requirement
  • You are comfortable with discovery-through-iteration on governance patterns

Thirty minutes to decide if RFE fits.

If the RFE column describes your situation, the next step is a thirty-minute discovery call. We scope your agent, map the authority it holds, identify the failure modes that concern you most, and confirm whether the engagement fits — or tell you honestly if it does not. No pitch deck, no proposal until we both agree on scope.