Identity Is the Bank Now
Fraud, financial crime, KYC, and customer experience have collapsed into a single engineering question about who the customer is. This final post in Financial Services Engineering argues that a unified identity layer is …
Tag
Security
Trust Is an Engineering Output
9 minutes
Being correct is not the same as being able to prove it. This final post in The Engineering Underneath argues that trust is an engineering …
Evidence Versus Speed
10 minutes
Regulated organisations have long optimised for speed and assumed the evidence could be assembled later. This third post in The Engineering …
Sovereignty Versus Efficiency
11 minutes
Regulated enterprises want hyperscaler economics and sovereign-grade data residency from the same platform, and most end up paying for both …
Data Costs: Are You a Victim of Your Own Success?
11 minutes
A high-frequency analytical query running against raw object storage scans the entire historical dataset every cycle. The cost compounds …
Multi-Tenant Agentic AI on Google Cloud: A Production Walkthrough
25 minutes
A review of Google's multi-tenant agentic AI reference architecture stage by stage, naming trade-offs at each decision point and filling the …
GATE v1.4 Roadmap
6 minutes
A preview of the next GATE release: output validation, break-glass formalisation, OWASP AISVS and MITRE ATLAS alignment, a Rust library, and …
The Regulatory Stack, Part 6: Building Under the CRA - A Reference Architecture
11 minutes
A production-grade reference architecture translating the GATE specification into a live runtime, using Apigee, Envoy Proxy, and …
The GATE Conformance Runner: What You Can Automate and What You Cannot
8 minutes
The gate-conformance v1.2.0 runner automates 9 of GATE's 19 checks against a live evidence store. The other 10 return PARTIAL: not failure, …
GATE v1.3: New Controls for Shadow Agents, Data Quality, and Model Drift
4 minutes
GATE v1.3 adds three new controls and a CLI conformance runner to the Governed Agent Trust Environment, closing three assumptions that …
The Regulatory Stack, Part 5: The Cyber Resilience Act Closes the Last Loophole
10 minutes
Think your AI agent escaped the EU AI Act's high-risk classification? The Cyber Resilience Act lands more than a year earlier, and it …
The Regulatory Stack, Part 4: Engineering Under the AI Act - Article 15 Cybersecurity in Practice
10 minutes
How to turn the EU AI Act's stringent cybersecurity requirements into a clean, automated side effect of your existing platform engineering …
The Regulatory Stack, Part 3: How the EU AI Act Made Verification a Legal Question, Not a Best-Practice One
13 minutes
The EU AI Act binds providers and deployers to a continuous, evidenced verification posture by December 2027. Here is the operational …