- Essays··9 min read
The Four Boxes Every Assessment Now Needs
Manchester's four-category AI assessment framework—Prohibited through Integrated—does not standardise what universities think about AI in assessment. It standardises the disclosure. What changed in September 2026 was that an implicit and often unspoken assumption buried in every syllabus became a mandatory, published decision visible to every student before they submitted. For a sizeable number of academics, classifying their assessments was the first time they had been asked what those assessments were actually measuring.
ai-in-educationassessment-policyhigher-educationacademic-integrityRead - Essays··8 min read
Who Signs the Ghost Citation in Nairobi
East Africa's bar now has case law on who pays when a model hallucinates a citation — the advocate who signed, not the tool. Tanzania suspended a counsel six months for two ghost cases; Kenya's Judiciary policy requires a human-verification certificate on every AI-assisted filing; Nigeria's Bar guidelines leave meaningful review undefined. The professional-indemnity market has yet to price any of it.
legal-aiai-hallucinationeast-africaprofessional-liabilityRead - Essays··8 min read
The Invoice That Retires the Chatbot
Enterprises are absorbing two simultaneous shocks in 2026: consumption billing that exhausts annual AI budgets months before year-end, and vendor deprecation cycles that retire the very tools those budgets funded. The result is a three-part governance vacuum — an invoice no one can explain, a model no one chose, a shutdown no one knows how to execute — and a single person in the room who approved none of it.
enterprise-aiai-finopsmodel-deprecationagentic-aiRead - Essays··13 min read
The Senior Engineer Whose Week Disappeared Into Somebody Else's Agent
AI coding tools moved the cost unit from headcount to developer behaviour, exposing a gap that finance and engineering share no dashboard to bridge. Individual output climbed whilst throughput stalled: the real bottleneck is senior review time, the constraint the invoice cannot show.
ai-coding-toolsengineering-productivitycode-reviewenterprise-aiRead - Essays··8 min read
The Controls You Cannot Descope
ISO/IEC 42001 certification documents the system an auditor reviewed, not the one running in production today. Working through the standard's 38 controls, each one reveals the same structural gap: a management system written against a fixed architecture, for a product that shipped weekly.
iso-42001eu-ai-actai-governanceenterprise-aiRead - Essays··9 min read
The 73 AI Services Your Network Already Has
Enterprise networks now carry a median of 73 AI services that nobody formally approved — each below procurement thresholds, each handling sensitive data, none linked to a measurable outcome. EU AI Act obligations make deployer liability real for organisations that cannot account for their shadow stack. The argument here is for governance by inventory: a structured three-column sheet that decides which tools stay, which are cut, and what success looks like for the rest.
ai-governanceshadow-itenterprise-aifinopsRead - Essays··7 min read
The 73% You Never See
Riverside County's AI form-filling tool delivered a 73% cut in application processing time — a clean institutional metric that says nothing about whether applicants left with every programme they qualified for. When a county measures throughput and error rate rather than referral breadth or benefit value per case, the AI ships the efficiency, the institution keeps it, and the resident encounters an already-incomplete system running faster.
public-sector-aibenefit-systemsai-governancemeasurementRead - Essays··7 min read
The Actuary AIDA Never Meets
Halodoc's AIDA is a competent clinical assistant—the problem is structural. Every claim it touches flows to a national payer running a 108 per cent claims ratio, headed for payment default by July 2027, with no independent model-risk regime sitting between the model's output and the system's solvency exposure. Clinical AI in ASEAN scales in months; the actuarial and governance infrastructure that would hold it to account scales in years.
clinical-aimodel-riskindonesia-healthcarehealth-insuranceRead - Essays··7 min read
Store Production Prompts in Your Application Code
OpenAI's deprecation of its Prompts API—with fourteen words of migration guidance—forces a question most production teams are poorly equipped to answer: where do prompts live, and who owns their history? The directive to version them in application code is correct; the problem is that most organisations lack the evaluation discipline and audit infrastructure to comply without embedding new technical debt in the same location as the old.
prompt-engineeringllm-opsopenaiai-governanceRead - Essays··8 min read
The Newsroom That Named Its Terms
Nation Media Group's March 2026 AI editorial framework is the first in East Africa to put accountability in writing — claiming institutional ownership over every decision the tool makes on the paper's behalf. Whether it does real editorial work depends on one clause: whether the training budget matches the vendor licence. Every peer document on the continent leaves the same chapter unwritten — the annotation labour that built the models the policy now governs.
african-journalismai-governanceeditorial-policyeast-africaRead - Essays··8 min read
The Certificate You Did Not List
Enterprise procurement teams are embedding ISO 42001 status into vendor questionnaires ahead of the EU AI Act's August 2026 enforcement milestone — and deals are stalling when that field comes back empty. The pattern mirrors how SOC 2 became a contract gate a decade ago, but the timeline is compressed to eighteen months rather than five years. Vendors without an auditable AI management system are not losing on price; they are failing the first screening before negotiation begins.
iso-42001ai-governanceeu-ai-actenterprise-procurementRead - Essays··8 min read
Two Ledgers in a Kagome Field
Kagome's AI yield model forecasts harvests five weeks out from soil sensors and satellite pixels; its SSBJ-mandated Scope 3 ledger must account for the same fields in itemised grams of CO2-equivalent. The two models share no instrumentation — a nitrogen prescription that reduces N2O flux does not automatically become a credited emissions delta. That reconciliation is where Japanese food processing will spend the next several years, regardless of whether precision agriculture's sustainability claims hold up.
precision-agricultureclimate-disclosurescope-3-emissionsjapanRead - Essays··10 min read
The Bill That Ended the Pilot
Uber burned its entire annual AI coding budget in four months — the full allocation gone by spring, no controlled overrun flagged in planning. Three-quarters of enterprises watched AI costs blow past budget last year, and the correction now arriving is triage, not enthusiasm. The governance failure and the cost failure are the same failure: if you cannot name who changed the production prompt, what it scored before it shipped, or what spending ceiling it is running under, the debt is already due.
ai-cost-governanceagentic-aienterprise-aifinopsRead - Essays··12 min read
The Orphan Line Item
The EU AI Act's high-risk AI obligations became enforceable in August 2026 with no harmonised standards published and almost no notified bodies designated — the infrastructure the regulation assumed would exist. What arrives instead is a bill finance did not forecast: third-party conformity assessment at €50,000–150,000 per system, months-long queues for notified-body slots, and recurring annual costs at 20–40% of initial spend. The compliance deadline has moved; the invoice has not.
eu-ai-actregulatory-compliancenotified-bodiesconformity-assessmentRead - Essays··8 min read
The Jakarta Claims Desk After the Copayment Rule
Indonesia's mandatory 10% copayment rule, in force since March 2026, has shifted the distribution of submitted health claims faster than any fraud-detection model calibrated on the old baseline can follow. The real discipline at a Jakarta claims desk is not the AI stack — it is who overrides it, whether those overrides are logged, and whether a coverage-adverse audit exists before the regulator requests one.
health-insuranceai-governanceclaims-processingindonesiaRead - Essays··8 min read
The Agents You Cannot Name
Most enterprises deploying AI agents cannot list what is running, who approved it, or what it costs: a governance gap that is today's operating environment, not a future risk. Agentic workflows trigger ten to twenty LLM calls per task, and token volumes have grown sixty-fold since 2023. The agents you cannot name are the ones that will fail an audit, breach a data policy, or exhaust months of budget because nobody set a spend limit.
ai-governanceagentic-aienterprise-aishadow-aiRead - Essays··8 min read
The PCCP Constraint
The Predetermined Change Control Plan is FDA's mechanism for letting AI-enabled medical devices update without a new submission. It is not a solution to the adaptive-AI problem. It is a scoping exercise written in advance. The modifications a vendor can ship without re-filing are precisely and only those the engineer defined eighteen months before knowing what the field would ask for.
medical-aifda-regulationpccpdigital-pathologyRead - Essays··11 min read
The agentic AI carve-out: why US and EU regulators are writing rules neither can enforce
The Federal Reserve placed agentic AI outside its model-risk framework in April; the European Commission issued transparency guidance two weeks before enforcement began in August. For banks operating across both jurisdictions, the collision is immediate and the governance gap is real. The first regulatory action will likely come for failing to document why deployment was safe at all, rather than for deploying these systems badly.
agentic-aifinancial-regulationmodel-riskeu-ai-actRead - Essays··8 min read
1 million Genomes Later, the Bedside Model Still Waits
The UAE has assembled the most complete sovereign healthcare-AI stack any country has built: sovereign compute, a million-sample national genome programme, and a clinical model benchmarked ahead of GPT-4. The model's own authors say it is not yet fit for clinical use. That caveat is the most precise evidence about where the Gulf investment earns its return: in the biobank and the data-sovereignty infrastructure rather than in the generative layer above them.
genomicsclinical-aiai-governancesovereign-aiRead - Essays··9 min read
The model-risk carve-out: why US banks got a temporary reprieve from agentic AI oversight while EU lenders face their deadline
SR 26-2, the Federal Reserve's updated model-risk guidance, carves generative and agentic AI out of supervisory scope. The carve-out is a placeholder while regulators decide what replaces SR 11-7. The EU AI Act's high-risk obligations arrive on 2 August. For multinational banks, the result is a structural supervision paradox: US headquarters has time but no clarity; European subsidiaries have clarity but no time.
model-riskagentic-aieu-ai-actbanking-regulationRead - Essays··8 min read
The $500 Million Bill Nobody Anticipated: When AI Slop Debt Becomes a Balance-Sheet Problem
An enterprise client burned $500 million on AI services in a single month, a consequence of deferred governance rather than reckless strategy. AI slop debt, the compounding cost of zombie agents, ungoverned prompts, and abandoned POCs that still bill, has crossed from engineering irritation to balance-sheet liability. When 73% of AI initiatives exceed budget, the board question is no longer which use cases to fund but who can turn off what is already running.
enterprise-aiai-governancefinopsai-agentsRead - Essays··8 min read
Harvey Signs at Raffles Place. The Bill Starts Now.
When WongPartnership signed with Harvey, it acquired a seat licence and a compounding stack with it: wrapper-maintenance costs running 30–60% above the sticker, prompt libraries with no clear owner, and a hallucination-liability perimeter across three jurisdictions that Vietnam's new AI statute just made more expensive. The Forrester 400% ROI ceiling belongs to firms with clean, documented processes. Most Southeast Asian mid-market partnerships are not those firms.
legal-aisingaporeai-governanceprofessional-liabilityRead - Essays··8 min read
Riyadh Re, the Cession Ladder, and the Actuarial Weight of a Guidance Note
Saudi Arabia's mandatory cession ladder reached 30% in January 2025; the UAE Central Bank's Guidance Note on responsible AI followed in February. Together they define what the AI story in Gulf insurance actually costs. A domestic reinsurance mandate sits on one side and a documented compliance overhead on the other: annual bias testing, Arabic-language disclosure, mandatory human review at the decision point. The vendor deck prices neither.
gulf-insurancereinsuranceai-governancesaudi-arabiaRead - Essays··8 min read
Nadella's Half-Drawn Ledger
Satya Nadella's essay on the reverse information paradox names a real problem: enterprise buyers surrender proprietary knowledge to AI vendors with each query: prompts, corrections, evaluation harnesses. The framing is analytically sound. It is also written by the CEO most commercially exposed to a future in which that knowledge lives outside his cloud tenant. The enterprise buyer's job is to notice which parts of the argument survive when the messenger changes.
enterprise-aidata-sovereigntyinformation-paradoxmicrosoftRead - Essays··11 min read
Sunday Essay · Singapore's Rulebook for Agentic Finance
Singapore's Monetary Authority has published the first regulator-authored document to name, at runtime, the exact control gates between an autonomous agent's proposed action and a live ledger. SAFR's policy engine, runtime validator and append-only audit ledger map onto what DBS and Grab Finance already run in production. For model risk officers from Jakarta to Frankfurt, this is the document to read before the vendor decks arrive.
agentic-aifinancial-regulationmodel-riskmas-singaporeRead - Essays··7 min read
Three Clocks Ticking on the Same AI Quarter
Three deadlines are converging on the same AI quarter. One is set by treaty, one by physics, one by the next insurance renewal. Most boards are tracking the first, glancing at the second, and have never heard of the third.
eu-ai-actdata-centre-powerai-liability-insuranceai-governanceRead - Essays··7 min read
The Slop Debt Bill Is Due, and Nobody on the Org Chart Owns It
Slop debt is the space between what you pay for AI and what you do not get. The bill is in the inbox; the question is whether the org chart catches up before the auditor does.
slop-debtfinopsagentic-aiai-governanceRead - Essays··7 min read
200 million to Study the Wave You're Making
A frontier lab has priced in the scenario where its product makes office work unnecessary, and is funding the academics who'll help governments respond. Adoption is wide; realisation is narrow. The gap is now numerical.
enterprise-aiproductivity-paradoxworkforceagentic-deploymentRead - Essays··7 min read
The bill nobody booked
The most expensive line item in your AI budget for the next two years is the one your finance team has not yet named. It is sitting in your environment already, in half-built pilots, ghost fine-tunes and redundant copilots, capitalising itself into your monthly cloud invoice.
ai-slop-debtfinopsenterprise-aiai-governanceRead