Latest Articles
AI Catch-22
Six months ago in AI looks like a medieval era. Three researchers from METR spent six days analysing the July agent incident at OpenAI and Hugging Face. The instrument they used was another frontier AI. That is the paradox. But then a harder question follows. What if the analyst AI has itself been poisoned? Three parts: the METR incident and the poisoning question; how to think about Zero Trust and MDR, with specific things to demand from your vendors in writing; and how to filter the wider AI reading list, from mathematics to cheating to rebuilding malware to the warning that this ends in people being killed.
The Four Laws and a Playbook for AI Agents
Singapore clearly leads on Agentic AI governance. The principle is plain: accountability rests with humans, not with code. Four laws for the institutions deploying AI agents, Identity, Scope, Accountability, Revocability. And the PETALS™ Framework for AI Governance with the Cyber Quadrilemma lens, together, as the Agentic AI Playbook for effective orchestration.
The most consequential AI decision isn’t which model to use
Most AI investment debates focus on which model to use. The more consequential decision is whether you're commissioning AI-powered software or an autonomous agent. Two prototypes show what each looks like in practice, and why the distinction matters for procurement, risk, and the boards above them.
The Cyber Quadrilemma
Anthropic Claude Security is impressive; however, it is just one pillar of four. Config, Compliance, and Culture remain unbuilt. A Quadrilemma is only resolved when all four pillars stand.