02 — ALL NOTES
Filtered by nothing. Everything we have published, newest first.
GUIDE
12 FEB 2026
The three questions that decide your AI Act tier
Intended purpose, autonomy and effect. A short test with four worked examples across banking and health.
12 MIN READ
FIELD NOTE
28 JAN 2026
Evidence that survives a model change
Versioning, deprecation and re-testing — how to keep a register honest when the model underneath it moves.
9 MIN READ
FIELD NOTE
14 JAN 2026
What surveillance auditors ask for, in order
Nine artefacts, in the sequence they request them, plus the three answers that never convince anyone.
7 MIN READ
OPINION
9 DEC 2025
A control library is a product decision
Why the shape of your control library determines how long every future audit takes.
6 MIN READ
PLAYBOOK
21 NOV 2025
Scoping an AI system without a legal team
A practical scoping routine for product teams, with the four questions that resolve most arguments.
10 MIN READ
OPINION
4 NOV 2025
The questionnaire is the audit
Buyers now ask the questions a regulator would. Treat the security questionnaire as a rehearsal, not admin.
5 MIN READ