The Disciplines AI Governance Forgot

Mythos did something unusual when it launched. It hard-coded which AI model could be used for which task category inside its platform. Customer-facing responses could only use smaller, lower-risk models.…

From Human Supervision to Policy Governance

Supervision has latency. A human watching an AI system needs time to observe what happened, recognise that something is wrong, decide what to do and then act. That sequence takes…

Your Regulator Won’t Tell You What to Build. That’s the Problem.

The FCA has made its position on AI clear: no new rules. Existing frameworks apply. Consumer Duty. SM&CR. Operational resilience. Work it out. This is being reported as the regulator…

If Your AI Guardrails Live in the Prompt, They Aren’t Guardrails

When OpenClaw's security audit found over 500 vulnerabilities, the most serious category wasn't a flaw in the code. It was prompt injection. Prompt injection is what happens when an AI…

Adding Controls To AI Isn’t Governance

Most organisations discover they have a governance problem the same way. Something goes wrong. An automated workflow sends the wrong response to the wrong customer. An AI agent escalates an…

When AI Stops Being a Tool

There is a project on GitHub called OpenClaw. It appeared in November last year. By March it had more stars than any open-source project in history. It connects to your…

Responsibility Is the Hardest Thing to Automate

Automation scales execution easily. Responsibility does not. As systems become more autonomous, decisions happen faster, more frequently, and further away from the humans who once made them. The result is…

When Humans Leave the Loop

Many software systems that appear stable are not stable because they are well designed. They are stable because humans quietly make them so. People notice when something feels off. They…

Why Most Platform Architectures Fail Before AI Scale

Most teams planning to introduce AI into their platforms are asking the wrong questions. They focus on models, tools, and capabilities, when the real risk sits elsewhere: in architecture decisions…