Blog

Analysis on enterprise AI governance, inline policy enforcement, agentic AI security, and regulatory compliance.

AI Policy Engine: Where the Decision Point Sits and What It Has to Evaluate

An AI policy engine evaluates every AI request against the deployer policy at the moment the request crosses the AI boundary. The engine reads identity context, prompt classification, model authorization, and policy state, then emits a pass or block verdict with a signed audit record. This article walks through what the engine has to evaluate, where it sits relative to the application and the model, and the architectural properties that make the engine defensible under audit.

AI Security Solutionsai-securitypolicy-enforcementinline-enforcementai-governancearchitecture
Read post →

AI Gateway High Availability: The Failure Modes That Matter and the Topology That Survives Them

An AI gateway sits inline between the user and the LLM. When the gateway fails, the AI traffic either stops (fail closed) or bypasses the gateway (fail open). Both choices have costs. This article walks through the failure modes that matter in production, the topology patterns that survive them, and the architectural trade-offs around fail-closed vs fail-open under regulatory pressure.

Platform & Architectureai-gatewayarchitectureai-securityinline-enforcementcloud-security
Read post →

Prompt Injection Monitoring: What to Watch For in Production Traffic and Where the Signals Live

Prompt injection monitoring is the operational layer above detection. The detector fires on a single request. The monitor watches the population of requests over time and surfaces trends, drift, and emerging attack patterns. This article walks through the signals worth watching, the cadence on each, and the runtime evidence the monitor depends on.

Problem-Awareprompt-injectionllm-securityai-securityinline-enforcementaudit
Read post →

Prompt Injection Detection: The Three Inspection Layers That Actually Catch It in Production

Prompt injection detection lives at three inspection layers: the inbound prompt, the model output, and the downstream tool invocation. Each layer catches a class of attack the others miss. Production systems that rely on a single layer leak the rest. This article walks through what each layer detects, where most deployments today have visibility, and what the runtime architecture needs in order to detect across all three.

Problem-Awareprompt-injectionllm-securityai-securityinline-enforcementllm
Read post →

AI Risk Register Template: What Each Row Has to Capture and Where the Evidence Comes From

An AI risk register is the operational artefact that records the risks the deployer has identified for each AI system, the controls applied, the residual risk, and the evidence that the controls are working. EU AI Act Article 9, NIST AI RMF, ISO 42001, and Fannie Mae LL-2026-04 each expect a register the deployer can produce on demand. This article walks through the columns that hold up across regimes and the runtime evidence each column depends on.

Compliance & Regulationai-governanceai-complianceeu-ai-actiso-42001audit
Read post →

AI Impact Assessment Template: The Fields a Regulator and an Auditor Both Read

An AI impact assessment template that holds up under EU AI Act Article 27, GDPR Article 35 DPIA, Fannie Mae LL-2026-04, and NIST AI RMF inquiries has to cover the same architectural primitives in the same vocabulary the regulators use. This article walks through the fields the template has to include, the questions each field answers, and the runtime evidence the deployer needs in order to keep the assessment current.

Compliance & Regulationai-complianceai-governanceeu-ai-actcomplianceaudit
Read post →

EU AI Act Codes of Practice: What the GPAI Provisions Expect and Where Deployers Sit

The Codes of Practice in the EU AI Act are the operational mechanism that translates the GPAI obligations under Articles 53 and 55 into concrete commitments providers can sign. The Code on General-Purpose AI Models, published by the AI Office, sets out the transparency, copyright, and safety expectations the providers have agreed to. Deployers that build on top of GPAI inherit downstream obligations and a set of expectations the deployer cannot delegate to the provider.

Compliance & Regulationeu-ai-actai-complianceai-governanceregulationllm
Read post →

EU AI Act Prohibited Practices: What Article 5 Bans and How Enforcement Catches It

Article 5 of the EU AI Act lists the practices the regulation prohibits outright. Subliminal manipulation, exploitation of vulnerability, social scoring by public authorities, predictive policing based on profiling, untargeted facial scraping, emotion inference in workplaces and schools, biometric categorisation by protected characteristic, and most real-time biometric identification in public spaces. The prohibitions took effect February 2, 2025. The €35 million / 7% penalty tier applies. This article walks through the eight prohibitions and the architecture that catches them at the AI request boundary.

Compliance & Regulationeu-ai-actai-complianceregulationai-governanceinline-enforcement
Read post →

EU AI Act Article 15: What the Accuracy, Resilience, and Cybersecurity Obligation Requires

Article 15 of the EU AI Act sets the accuracy, resilience, and cybersecurity floor for high-risk AI systems before the August 2, 2026 deadline. The obligation runs end to end across the deployment, from the declared accuracy metric in the technical documentation to the runtime behavior under adversarial pressure. This article walks through the regulation text, the structural gaps in most deployments, and the architectural pattern that satisfies all three properties together.

Compliance & Regulationeu-ai-actai-complianceai-securityregulationinline-enforcement
Read post →

Agentic AI in the Enterprise: Where the Action Surface Sits and How It Gets Controlled

Agentic AI in the enterprise introduces a new action surface: the LLM-driven agent that calls tools, queries databases, sends emails, files tickets, runs code, and triggers workflows on behalf of an authenticated user. The control problem is not whether the model behaves. The control problem is who authorized this specific action, against what data, under which policy, and with what audit record. I walk through what the enterprise action surface looks like in 2026, where the control points sit, and how the NIST three-pillar framework maps to the enterprise deployment.

Problem-Awareagentic-aiai-securityidentity-and-authorizationinline-enforcementarchitecture
Read post →

Sensitive Data AI Detection: Classifying Prompt Content at the AI Request Boundary

Sensitive data AI detection classifies prompt content at the AI request boundary, where the prompt is reconstructed into a structured payload and a classifier surfaces the categories the policy reads. The category set includes PII (email, phone, SSN, NPI), PHI, PCI, secrets (API keys, tokens, certificates), source code, and customer identifiers. Document-level classifiers do not run cleanly against prompt context windows. The inspection-point classifier runs at request time, surfaces labels the policy uses, and stamps the labels on the per-decision audit record.

AI Security Solutionsdata-loss-preventionai-securitydlppolicy-enforcementinline-enforcement
Read post →

Per-Route AI Policies: Attaching Policy to the URL Path, Not the Application

Per-route AI policies attach the policy decision to the API route the request is calling, not to the application that initiated it. Different LLM endpoints carry different risk profiles. The chat-completion endpoint, the embeddings endpoint, the file-upload endpoint, the batch endpoint, the audio endpoint, and the agent action surfaces each warrant their own rules. I walk through what per-route policy looks like in practice, how route patterns express AI-specific constraints, and how the architecture composes with per-role policy and prompt-level classification at the inspection point.

Platform & Architecturepolicy-enforcementai-securityarchitectureinline-enforcementllm
Read post →