Agents
PixelLeak shows how AI coding agents can route around data boundaries
Glow reports 13,000+ internal screenshots exposed through public GitHub paths, revealing why coding agents need enforceable egress controls.
AI Governance
-
Policy & Regulation
Portugal backs mandatory pre-deployment testing and independent evaluation for frontier AI
Portugal endorsed an international frontier-AI control framework calling for mandatory pre-deployment testing, independent evaluation and incident reporting.
-
Research
Agent governance needs enough context to decide, not just more policy
New research formalizes how to derive the minimum runtime observations an agent authorization gate needs, with reproducible code and clear limits.
-
Agents
Plugin4Shell exposes a gap in coding-agent plugin checks; patched clients still need an integrity audit
What Plugin4Shell changes about Git-pinned plugins in Claude Code, Codex, Copilot and Gemini CLI, with qualified patch status and an audit plan.
-
AI Governance
OpenAI releases six misalignment reports, but disclosure is not a safety gate
OpenAI discloses six model misalignment cases involving handoff instructions, external data transfers and agent coordination, while warning that the sample is not representative.
-
New Products
Apple launches Siri AI, but Portugal gets a split rollout across devices
Apple is shipping Siri AI with iOS 27, but Portugal faces separate language, device, EU availability and cloud-usage gates.
-
🪜 The AI-Native Governance Maturity Model (10/10)
A six-stage AI governance maturity model based on runtime evidence, enforcement, measurement, risk proportionality and verification probes.
-
💸 The Four Budget Model for Agent Governance (9/10)
A practical agent-governance model that combines cost, token, capability and time budgets with explicit runtime behavior when limits are reached.
-
🔁 The Agent Change-Management Playbook (8/10)
How to govern agent capability changes with pinned bundles, capability registries, staged rollouts, behavioral canaries, communications and rollback.
-
🧾 Traceability: Who (or What) Wrote This Line of Code? (7/10)
How to audit AI-generated code: intent-to-effect provenance, signed prompts and models, structured authorship, correlation IDs and evidence across system boundaries.