Analysis on enterprise AI governance, inline policy enforcement, agentic AI security, and regulatory compliance.
Agentic AI workflows chain LLM calls across tools, data stores, and other agents. Most deployments authenticate the human at the front door and run the rest of the chain on shared service credentials. The audit trail collapses by the second hop.
Generative AI returns a response to a human-issued prompt and waits for the next instruction. Agentic AI issues prompts on its own initiative, applies the response, and chains the next call. The architectural divergence has direct consequences for identity, policy enforcement, and audit trails.
Read post →Agentic AI security is the practice of constraining what autonomous agents can request, what data they can include in prompts, and what evidence each decision leaves behind. Static credentials, model guardrails, and application logs fail the test. The enforcement layer has to sit at the HTTP AI request boundary.
LangChain, LangGraph, AutoGen, CrewAI, and the OpenAI Assistants API each ship a different agent loop. The security properties of each framework determine what an enforcement layer can see and what it cannot. The architectural divergence matters at the AI request boundary.
Read post →Six agentic AI architecture patterns dominate production deployments today: ReAct, plan-and-execute, multi-agent crews, retrieval-augmented agents, code-executing agents, and tool-using single agents. The security architecture differs across each. The enforcement layer always sits at the HTTP AI request boundary.
Read post →Legal discovery copilots read into the document repository, the case management system, and the email archive. The data the copilot reads at request time crosses attorney-client privilege, work-product doctrine, and the protective-order terms specific to each matter. This piece walks through the identity-aware policy decisions a legal discovery deployment has to commit at the request boundary, the audit record format that survives Rule 26 disclosure and a privilege challenge, and the architectural pattern that closes the gap.
HR recruiting copilots reach across the ATS, the resume corpus, the assessment vendor data, and the interview transcripts. The decisions the copilot supports fall inside the EU AI Act Annex III high-risk classification for employment, the EEOC enforcement perimeter, and state employment-screening statutes like NYC LL 144 and Illinois AIVIA. This piece walks through the identity-aware policy decisions an HR recruiting deployment has to commit at the request boundary, the audit record format that survives an EEOC complaint and an EU AI Act review, and the architectural pattern that closes the gap.
Read post →Finance back-office copilots reach across the GL, the close calendar, the vendor master, and the pre-announcement earnings detail. The data the copilot reads at request time crosses MNPI thresholds, vendor confidentiality contracts, and SOX 302 attestation territory. This piece walks through the identity-aware policy decisions a finance back-office deployment has to commit at the request boundary, the audit record format that survives SOX and SEC review, and the architectural pattern that closes the gap.
Read post →Engineering copilots reach across the source repository, the build infrastructure, the package registry, and the production credential store. The decisions the copilot supports cross export-control boundaries, the customer source-code confidentiality terms, and the secret-handling rules the security team has built. This piece walks through the identity-aware policy decisions an engineering copilot deployment has to commit at the request boundary, the audit record format that survives SOC 2 Type II and customer audit, and the architectural pattern that closes the gap.
Read post →Q2 2026 closed with the EU AI Act high-risk system requirements 60 days from effect, the Fannie Mae and Freddie Mac AI governance frameworks already in force, and the first major enforcement actions under the EU AI Act risk-management obligations on the docket. This quarterly mini-report walks through the regulations that took effect or shifted in Q2 2026, the enforcement and litigation actions that landed, the recurring evidence gaps auditors cited, and the architectural patterns enterprises adopted to close them.
Read post →AWS Bedrock Guardrails sit inside the model invocation path on the AWS side of the API boundary. The architecture covers AWS-hosted endpoints with policies AWS authors and evaluates. This piece walks through the Bedrock Guardrails request path, the four policy categories AWS exposes, where the inspection actually runs, the audit records the deployer receives, and the deployment patterns the Bedrock-only customer and the multi-cloud customer should each consider.
CI pipelines now run coding agents on every pull request. The agent reads the repo, pulls down third-party packages, asks an LLM to write code, executes the suggestion, and pushes a commit. Each step is an attack surface a 2024-era CI threat model did not contemplate. This piece walks through the supply-chain attacks that already shipped in production CI in 2026, where the control point sits at the AI request boundary, and the per-decision audit record a forensic investigator needs to reconstruct the incident.
Read post →