Confidential-Computing on Sakura Sky: Cloud, Data, Security

The Regulatory Stack, Part 6: Building Under the CRA - A Reference Architecture

Thu, 18 Jun 2026 00:00:00 -0400

The strategic cases have been made, the legal liabilities mapped, and the 24-hour reporting stopwatches calibrated. If you have followed this series from Part 1’s AISVS-to-GATE map through Part 5’s CRA reporting clock, you know the thesis by heart: the model is not the product; the runtime is the product. The work is in the wiring.

The Regulatory Stack, Part 5: The Cyber Resilience Act Closes the Last Loophole

Mon, 15 Jun 2026 00:00:00 -0400

The Low-Risk Illusion

A dangerous sense of relief has settled over enterprise product teams whose AI applications fell outside the high-risk categories of the EU AI Act’s Annex III. The assumption is that because an agent merely summarises documentation, routes internal support tickets, or drafts marketing copy, it sits safely outside the regulatory microscope.

The Regulatory Stack, Part 4: Engineering Under the AI Act - Article 15 Cybersecurity in Practice

Thu, 04 Jun 2026 00:00:00 -0400

How to turn the EU AI Act’s stringent cybersecurity requirements into a clean, automated side effect of your existing platform engineering pipelines.

Trustworthy AI Agents: The Trustworthy AI Blueprint

Mon, 01 Dec 2025 00:00:00 -0500

This series began with a simple thesis: