Category
governance
41 posts in this category.
·10 min read
Amazon v. Perplexity: CFAA Ruling and AI Agents
The Ninth Circuit ruled the user, not the AI company, accesses a site under CFAA. What the August 4, 2026 ruling means for your AI agent policy.

·9 min read
15 State AGs to OpenAI: Preserve Evidence or Face Sanctions
15 Republican state AGs told OpenAI to preserve every breach record or risk spoliation sanctions. What the litigation hold means for your AI vendor contracts.
·11 min read
AI vs Human Cost: TCO Worksheet Before You Cut a Role
4 hidden costs an AI vs human cost worksheet must catch: oversight, errors, integration, pricing risk. Clear the 5-question checklist first.

·13 min read
California ADMT for Employers: Notice and Risk Templates
California ADMT compliance for employers: do your AI hiring tools need a pre-use notice by Jan 1, 2027? Copy notice, opt-out and risk assessment templates.
·10 min read
Are Your AI Chats Privileged? ChatGPT and Claude Subpoenas
Are AI conversations privileged? No, a 2026 federal ruling says ChatGPT and Claude chats can be subpoenaed. What to keep out of AI logs now.
·10 min read
AI Content Detectors and False Positives: Governance Guide
178 papers desk-rejected by an AI detector at NeurIPS -- see what AI content detector false positives mean before you deploy one for hiring or grading.
·9 min read
Anthropic Recursive Self-Improvement: AI Governance Impact
Claude writes 80% of Anthropic's code. Which 4 documents does your recursive self-improvement AI governance policy need before this hits you?
·10 min read
ChatGPT Dreaming V3 Memory: Privacy Risks for Work Accounts
ChatGPT Dreaming V3 persists your team's data across sessions. GDPR Article 17 applies. 4 enterprise actions: audit, disable, and update your vendor DPA.

·10 min read
California AB 2013: AI Training Data Disclosure Guide
Which 12 training data disclosures does California AB 2013 require? AI training data transparency rules, who's covered, and the failed xAI suit.
·10 min read
Amazon KiroRank and Tokenmaxxing: Measuring AI Adoption
Amazon scrapped KiroRank after staff gamed it with tokenmaxxing. Build AI adoption metrics that reward outcomes, not fake usage volume.
·10 min read
Miasma and Phantom Gyp: npm Supply Chain Worm Explained
A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.
·10 min read
AI Support Chatbots With Account Actions: Takeover Risk
Hackers social-engineered Meta AI into resetting passwords on high-profile Instagram accounts by simply asking. What the attack means for any team deploying an AI chatbot that can take account actions, and the 6 controls that prevent it.
Showing 12 of 41 posts. View full blog archive →