skip to content

Archive

AI controls, agent systems, banking governance, production practice. 409 essays, newest first.

  1. AI Controls Architecture

    Risk teams know risk. The open problem is designing controls for systems that are non-deterministic, probabilistic, and attackable in natural language.

  2. Governing Agents the Way Cells Govern Themselves

    Six cell biology mechanisms that reveal what the networking 'control plane' metaphor misses about governing AI agents.

  3. The Risk Without an Engineering Solution

    Every other agentic AI risk has an engineering answer. Prompt injection doesn't. That changes everything about how you design controls.

2026
  1. A Frontier Model Is Not Trained Once

    The familiar story of internet-scale pretraining followed by human feedback is no longer enough. A frontier model is built through successive learning loops, each compressing different choices into the same weights.

  2. The Harness Is Part of the Token Bill

    The same model family solved every hidden-test repair through Pi and Grok Build, but one route reported sixteen times the total tokens. Most of the gap was context, not answers.

  3. Summarisation is where the judgment should sit

    Summaries fail by keeping the wrong things, not by being too long. The load-bearing part is usually the bit that looks like boilerplate, which is why the cheapest model and the tail of a log are the wrong places to do it.

  4. Masking doesn't declassify

    A PII scrubber in front of an LLM API checks the wrong property. The real options for confidential work are contract, local, or extraction — and extraction is judgment, not tooling.

  5. Try Widely, Build Narrowly

    Whether to use language models for every part of life is the wrong question. Trying one costs nothing and is how you find the tasks that did not exist; building around one is what costs, and the bill arrives as maintenance.

  6. The Half of DeepSeek Harness Nobody Is Reading

    The runtime got the reviews. The transferable part is how a 2,500-pull-request, agent-written repository keeps itself honest, and one of its rules caught a stale instruction in my own setup the same afternoon.

  7. The Evidence Boundary Between EU GPAI Code Adherence and a Model-Release Opinion

    EU GPAI Code adherence supports process reliance. An independent opinion on a specific model release still requires model- and deployment-specific evidence.

  8. Human Agency Should Be a Control Objective

    AI augments human agency only when people retain practical authority over delegation, scope, intervention, reversibility, contestability, and accountability.

  9. Read the Chain, Not the Date

    Grand AI forecasts become useful when you stop accepting or rejecting the story as a whole and test the links that make its conclusion possible.

  10. The knowledge base is the maintenance

    A working thesis, six months after my LLM wiki piece: plain Markdown plus relentless truth-keeping beats sophisticated storage plus neglect.

  11. The Judgement Bucket: How to Be Rigorous About the Claims You Can't Measure

    The sequel to the calibration gap: some governance claims have no number, and that does not excuse them from evidence. Pre-register the rule, invite the refutation, name the residual, report honestly.

  12. The Calibration Gap: Why AI Assurance Needs Experimental Rigour at Consulting Speed

    AI governance keeps choosing between rigorous-but-slow validation and fast-but-unfalsifiable frameworks. The escape is the experiment itself: for any measurable claim, the measurement is the faster path.

  13. The AI Portability Test

    The real test of enterprise AI ownership is whether the organisation can change models without losing the learning accumulated around them.

  14. Near-Parity Is Mostly a Claim About Formatting

    On the benchmark built to measure AI against real professional work, the best model scores 48% on deliverables that come in a file and 14% on deliverables judged as prose alone. That 34-point gap is the largest single effect in the paper, and it is not in the limitations section.

  15. The Number Checks Out. The Claim Doesn't.

    The most-quoted figure about AI and professional work is accurate, in the paper, and correctly transcribed. It is also a description of a scenario nobody would choose, because what travelled was the number without the condition it was computed under.

  16. Your Reviewer Model Is Not Independent

    When agents generate faster than anyone can read, the standard answer is a second model reviewing the first. Aerospace decomposed what makes a check independent decades ago, and a reviewer model fails the hardest of the three tests.

  17. Your Check Passed on the Proxy

    A green result is a true statement about a stand-in. Whether that stand-in resembles the thing you care about is a separate question, and the check cannot answer it.

  18. What A Prompt Trim Cannot See

    Deleting your agent's accumulated instructions is safest for the people who never tested them, and most dangerous for the people who did.

  19. Where the Harness Starts to Matter

    In April my benchmark said coding correctness is model-determined and the harness is a thin proxy. Two newer results show exactly where that claim breaks: the harness matters at the edge of what the model can do.

  20. Retrieval Becomes a Control

    Cerebras published an unusually honest account of their internal knowledge base. The retrieval engineering is solved. The assurance layer gets one sentence. Every enterprise copying this pattern is importing that asymmetry.

  21. The Work Behind the Work

    Coordination cost reveals valuable AI workflows, but only cash conversion and competitive durability make them valuable businesses.

  22. The best idea I didn't adopt

    Good and redundant are not opposites — they're the most common combination.

  23. The Program Is the Plan

    For many agent workflows, the right abstraction is not another tool call. It is a bounded program over small primitives.

  24. A Skill Is Not a Prompt

    The useful unit in agent systems is not a better instruction. It is a tested capability package: judgment, code, checks, routing, and boundaries.

  25. The Model Is Not the Unit of Return

    Model revenue is not customer return. The economic and risk unit is the harness that turns model output into accountable work.

  26. After the Harness

    Once model companies supply the generic agent harness, the valuable work moves into workflow design, human intervention, domain data, and the definition of good work.

  27. The SOP Is the Product

    Enterprise AI stops being a chatbot when the operating procedure becomes the thing the system can execute, inspect, and improve.

  28. The Agent Is the Trace

    Long-running agents are not defined by the model call. They are defined by the state, rules, tools, failures, and corrections that survive it.

  29. The frontier is no longer the back office

    Ken Griffin watched PhD-level finance work compress from months to days. The interesting question is whether bank AI controls are designed for the layer where the work now lives.

  30. Agent-Native Onboarding Is Not a Signup Form

    If a product wants agents as real users, first-run setup has to be an executable workflow, not a human signup ceremony wrapped in documentation.