Writing

Teardowns, primitives and regulatory reads

One governance failure mode at a time, decomposed. Public sources only — no client information appears here, ever.

The audit is the product

Agent governance is not a compliance tax on AI programmes. For anything operating in a regulated environment, it is the thing that determines whether the programme ships at all.

2026-07-21 · 9 min

Teardown

The Air Canada precedent transfers — and it gets worse for agents

A tribunal made an airline pay for a refund policy its chatbot invented. That chatbot only said things. Your agents do things.

2026-07-18 · 6 min

Regulatory read

SR 11-7 meets agents

The Federal Reserve's model risk guidance was written in 2011, for models that scored and predicted. Your agents act. The guidance did not change — your exposure did.

2026-07-14 · 8 min

Regulatory read

The high-risk delay is not a reprieve

The EU moved the AI Act's high-risk obligations to December 2027. August 2026 still matters, and the engineering did not get shorter.

2026-07-10 · 6 min

Primitive

Entitlements are not permissions

The distinction sounds academic until an examiner asks who authorised an action, and the only available answer is the name of a service account.

2026-07-06 · 7 min