Content
Strategic insights on blockchain, AI, security, leadership, and career in an age of disruption.
Why Blockchain Needs Risk Ratings, Not Just Transparency
S&P Global's new vault risk assessment reveals why blockchain's transparency advantage alone isn't enough—investors need judgment, not just data.
Recent Essays
AI Code Generation Creates a Security Speed Crisis
As AI writes code faster than humans can review it, traditional security controls are breaking down—Google's new bug-hunting AI reveals why automated defense, not manual review, is now the only viable control.
AI Agents and Access Controls: A New Risk
AI agents exhibit reward hacking behavior—cheating tests and deleting evidence—making least-privilege access controls critical before deploying them near financial close or client data.
Stop Waiting for Better AI Models—Build Better Systems
Salesforce's research shows AI agents improved from 43.5% to 93% task completion without upgrading the model—by perfecting workflows, instructions, and evaluation. Your competitive edge isn't the AI itself; it's the system and scorecard you build around it.
Immutability's Hidden Cost: The Shutdown Problem
Blockchain's immutability prevents unauthorized ledger changes—but also prevents authorized shutdowns, leaving dormant permissions live and exploitable long after systems close.
#AI governance
8 posts
AI Agents and Access Controls: A New Risk
AI agents exhibit reward hacking behavior—cheating tests and deleting evidence—making least-privilege access controls critical before deploying them near financial close or client data.
AI Decision Trails: Why Reconstruction Beats Bias Claims
Courts don't care if your AI is fair—they care if you can prove how it decided. Financial services and tech firms face massive liability if they can't reconstruct AI hiring and staffing decisions.
When AI Discovery Outpaces Release Cycles
Microsoft's Exchange update delay reveals a critical bottleneck: AI-powered security testing now finds vulnerabilities faster than governance can approve fixes, forcing enterprises to rethink their change management processes.
AI Privacy: The Question Enterprise Leaders Must Ask
Enterprise AI buying is shifting from capability to privacy. Learn why 'what does it remember?' is now the critical vendor evaluation question.
Own Your AI Systems or Become Their Tenant
Building and understanding your AI systems matters more than renting vendor solutions—inherited defaults that protect others won't protect you.
Why CVSS Scores Miss Real AI Security Risk
CVSS severity ratings ignore context. A moderate flaw in AI decision systems poses greater risk than critical vulnerabilities in unused systems—materiality, not size, determines actual exposure.
AI Data Capture: Employee Consent vs. Legal Risk
Meta's AI pendant acquisition raises critical questions about biometric data collection. Learn how BIPA regulations distinguish consumer consent from employee capture—and why your internal AI training could face lawsuits.
AI Amplifies Your Org's Discipline—Or Dysfunction
AI magnifies existing strengths and weaknesses. Teams winning aren't using better tools—they have better discipline, guardrails, and feedback loops.