Jesus A McKinney
Templates & Workflows Desk
Jesus A McKinney is the byline of the templates and workflows desk at AI Policy Desk. The desk turns requirements into documents a small team can adapt the same day: acceptable-use policies, AI registers, vendor checklists, incident response plans and tool comparisons. A template under this name is built from the text it implements (a clause of the regulation, a control from a framework, a vendor's current terms), says which requirement each field answers, and notes what could not be verified. The desk says which option it would pick and why, and says so when a template is not worth a team's time.
- Fields mapped to the clause they answer
- Vendor terms read on the vendor's own pages
- Dated checks on each post
31 articles by Jesus A McKinney
APP 1.7 Automated Decision-Making: Privacy Policy Template
From December 10, 2026, APP 1.7 requires an automated decisions section in Australian privacy policies. Free template, scope test and tool-by-tool check.
Claude Georgia Paywall Bypass: Agent Data-Access Rules
Claude pulled Georgia vote counts with a dashboard token instead of the state's $485 voter file. Copy these data-access rules so your agents stop at the gate.
AGENTS.md Security: The Downloads Folder Attack on Codex
A planted AGENTS.md in ~/Downloads got Codex to install malware in tests. Six steps for teams on Codex or Claude Code, plus what to log.
CISA AI Token Guidance: A Denial-of-Wallet Playbook
CISA and four Five Eyes agencies published AI token guidance on October 22. Seven steps a small team can run: tiers, 70/80/90 alerts, loop caps.
Shadow AI Policy Template: Free and Ready to Copy
Fill it in one afternoon: a free shadow AI policy template with an approved-tool list, data rules, a request deadline and no-blame slip reports. Copy it.
AI Risk Register Template: Free, Scored and Pre-Filled
17 pre-filled AI risks with a 1-5 likelihood x impact score, a starting control and the rule behind it. Get the free AI risk register template in Excel.
AI Workforce Transition Plan: Retraining Before Layoffs
Build an AI workforce transition plan for a small team: map tasks, retrain or redeploy first, find WIOA training money, then check WARN notice rules.
NYC Chatbot Doom Loop Rule: Customer Service Checklist
NYC's DCWP wants every support chatbot to say it's a bot, offer a one-step route to a human and log each chat. The checklist, the fines and how to comment.
FCA AI Guidance: Good Practice Checklist for Smaller Firms
The FCA's new AI good and poor practice adds no rules, but names who answers when AI goes wrong. A checklist for smaller UK firms, mapped to each section.
OpenCode Security Breach: What to Do With Your API Keys
OpenCode says a Console breach may have exposed users' OpenAI, Anthropic and Google keys. A checklist to revoke, rotate, check billing and cap spend.
SPUR Coalition Adds NYT and Economist: What AI Builders Must Log
NYT, The Economist, AFP and 40+ publishers joined SPUR. We ran its Content Telemetry v1.0 tests and a sample RAG session. What small AI teams should log.
Colorado ADMT Comment Letter Template
Copy-paste comment letter and 3-minute hearing script for the proposed Colorado ADMT and chatbot rules. Comments close Oct 26, 2026 at 11:59 PM MT.