Really great article, @Gareth Brown and a good intro, CTA to your company! Are you hiring, btw? :)
Back to the article: almost all points mentioned in the article are rather AI-independent and sound like best practice guidelines that IDPs should fulfill to protect the company infrastructure and to avoid developers / engineers shooting themselves in the foot.
Do you have concrete examples of IDPs that fulfill all / most of the criteria you mentioned in the article?