ai-governance
The Record That Isn't a Rule
A permission file, a compliance calendar, a public register. Three institutions produced something legible. None of them produced something
Mirko Korotaj
eu-ai-act
The Act That Postponed the Hard Part
The Digital Omnibus on AI is now law. Political agreement was reached on 7 May 2026, and the thing itself - Regulation (EU) 2026/1744 - was published in the Official Journal on 24 July and entered into force three days later, with time to spare before the very August
ai-agents
AGENTS.md Is a Lock on a Door Nobody Lists
This site has already answered the question it is about to ask. It did so in May, in its first article, in about ten lines, and then it put the answer in a drawer and spent three months writing post-mortems. The agent that deleted the database had an impeccable post-mortem:
llm-security
Encrypted, Technically
The cryptography held. Nobody had specified what it was supposed to be protecting, so a weaker sibling model could just be asked, politely, to read the mail out loud.
ai-agents
The Report That Contained the Damage
An autonomous model breached a real company's production database, recognized the target was real, and kept going anyway. Somewhere between the breach and the blog post, a catastrophe filed the correct paperwork and came out the other side as routine
ai-agents
The System That Cheated (Itself)
Part one of this series had no villain, a door nobody had thought to guard, tricked open by ordinary content arriving through an ordinary channel. Part two had one on a single side of its mirror: a person, with intent, who picked a target and rented an unsupervised agent to
ai-agents
The Weapon That Never Chose the Target
Part one of this series described five systems tricked into acting for someone they had never agreed to serve - a confused deputy, thirty-eight years old, wearing new clothes. None of those five cases required a human to decide anything beyond building the tool and leaving a door unguarded. This
ai-agents
The Deputy That Was Confused
Mindgard's proof of concept was Windows Calculator. They renamed the executable git.exe, dropped it in the root of a repository, and opened the project in Cursor. No click, no prompt, no dialog to approve... Calculator windows began stacking up on their own, one after another, for as
openai
The Fund That Isn't Permanent
On July 2, 2026 the Financial Times reported that Sam Altman has been pitching Donald Trump, Commerce Secretary Howard Lutnick, and Treasury Secretary Scott Bessent - and, in a bid for bipartisan cover, Senator Bernie Sanders - on a proposal: OpenAI would allocate 5% of its capital, roughly $42.6
ai-agents
The Control That Was Tested Once
Between late June and mid-July 2026, six research teams - an academic pair at the Alan Turing Institute, a university-industry team spread across Tel Aviv University, the Technion, and Intuit, a lab at Hong Kong University of Science and Technology, a boutique firm called Sand Security Research, Varonis, and a
ai-agents
The Lifecycle That Was Never There
The framing of shadow AI as a data protection problem is intuitive and almost entirely wrong. The intuitive version: an employee connects a personal AI assistant to their work email, the assistant processes confidential client communications, the data leaves the organisational perimeter. Article 33 breach. Notification obligation. Supervisory authority investigation.
ai-governance
The Government That Governs Itself
Isonomia described a settlement. One page, signed by the acting Attorney General, that left the United States permanently barred from examining the taxes of a sitting President. The problem was precise: a law that formally applied to everyone had been quietly amended, for one party, by bilateral agreement. The form