AI governance
5 posts
← All writing- / 0116 August 2026
Hidden reasoning is an information asset. You have not classified it.
Hidden model reasoning is an information asset you have not classified, cannot sanitise, and cannot verify. What the reasoning-trace extraction paper means for CPS 234, your retention obligations, and what counts as evidence in an AI system.
- / 024 July 2026
Your AI Policy Doesn't Fire When Your Agent Acts
I walk into firms with AI policies sitting in SharePoint. They get cited in board decks. They show up in audit binders. Then a model makes a decision, moves money, drafts client output, and the policy watches from the shelf. That gap is a wiring problem. Prose does not intercept a call. Prose does not sign an evidence record. Prose does not refuse an action because a control was not satisfied. The Difference Between a Document and a System A governance document describes what should happen
- / 039 June 2026
Most companies aren't using AI. They're performing it.
TL;DR: Organizations buy AI without defining what success looks like. They deploy tools, run pilots, create governance frameworks, but skip the step of connecting technology to measurable outcomes. The result is expensive theater that produces activity without results. Why most AI initiatives fail: * No measurable outcome defined before deployment * Procurement processes designed for deterministic software, not probabilistic AI * Missing translation layer between technical capability and bu
- / 049 June 2026
Why We Replaced Markdown With JSON: The Constitutional Stack
Prose specifications can't be verified. A constitutional stack needs a runtime, and a runtime needs structured data.
- / 059 June 2026
The oversight vacuum: why AI adoption without governance is tearing companies apart
I've watched the same pattern repeat across dozens of organizations in the past 18 months. A leadership team sees a demo. Someone in the room plays with ChatGPT over lunch. The conversation shifts from "should we" to "how fast can we" in a single meeting. The deployment begins before anyone checks what's actually under the hood. This isn't a story about technology moving too fast. This is about organizations moving faster than their ability to understand what they're deploying. The gap between