GATE v1.5 Roadmap
A preview of the next GATE release: a per-control ISO/IEC 42001 mapping with the asymmetry written down, streaming-aware output validation, an end-to-end ADK reference implementation, a public playground, and the fuzzing …
Tag
Compliance
GATE v1.4: Output Validation, a Rust Companion, and the Conceptual Layer as OKF
10 minutes
GATE v1.4 adds C20 output validation at the delivery boundary, formalises break-glass as a signed contract, adds informative mappings to …
Your Managed Providers Are About to Be Regulated. Here Is What to Ask Them.
11 minutes
The UK Cyber Security and Resilience Bill and NIS2 both regulate managed service providers directly, wherever they are established. Seven …
Regulatory Evidence at Machine Speed
9 minutes
Regulators have moved from asking banks for periodic reports to asking for specific evidence, on demand, about decisions made months ago. …
Your Ontology Is the Asset. Stop Renting It Back.
10 minutes
Agentic AI post-mortems keep naming the same trio: determinism failures, hallucinations, and compliance gaps. An ontology retires all three, …
Evidence Versus Speed
10 minutes
Regulated organisations have long optimised for speed and assumed the evidence could be assembled later. This third post in The Engineering …
Compliance You Can Prove
11 minutes
Why the next era of GDPR, AI Act, and MiCA readiness is engineered, not documented. Praxis wires controls into live systems and produces …
Consent Is Data Engineering, Not Legal
10 minutes
Marketing teams buy a consent platform and approve a cookie banner, then assume the privacy problem is solved while personal data keeps …
GATE v1.4 Roadmap
6 minutes
A preview of the next GATE release: output validation, break-glass formalisation, OWASP AISVS and MITRE ATLAS alignment, a Rust library, and …
The Regulatory Stack, Part 6: Building Under the CRA - A Reference Architecture
11 minutes
A production-grade reference architecture translating the GATE specification into a live runtime, using Apigee, Envoy Proxy, and …
The GATE Conformance Runner: What You Can Automate and What You Cannot
8 minutes
The gate-conformance v1.2.0 runner automates 9 of GATE's 19 checks against a live evidence store. The other 10 return PARTIAL: not failure, …
GATE v1.3: New Controls for Shadow Agents, Data Quality, and Model Drift
4 minutes
GATE v1.3 adds three new controls and a CLI conformance runner to the Governed Agent Trust Environment, closing three assumptions that …
The Regulatory Stack, Part 5: The Cyber Resilience Act Closes the Last Loophole
10 minutes
Think your AI agent escaped the EU AI Act's high-risk classification? The Cyber Resilience Act lands more than a year earlier, and it …