Your System Prompt Is Not a Trust Boundary
16 minutes
A text-to-SQL agent's system prompt cannot enforce a data rule. sql-guard v0.2.0 puts the rule in a parser instead, and closes eight …
Category
Engineering
HTTP QUERY Finally Settles the Argument. Your Infrastructure Gets the Next One.
8 minutes
RFC 10008 gives HTTP a method that is safe, idempotent, and carries a request body. It ends a design argument I have been having in API …
Data Costs: Are You a Victim of Your Own Success?
11 minutes
A high-frequency analytical query running against raw object storage scans the entire historical dataset every cycle. The cost compounds …
Multi-Tenant Agentic AI on Google Cloud: A Production Walkthrough
25 minutes
A review of Google's multi-tenant agentic AI reference architecture stage by stage, naming trade-offs at each decision point and filling the …
GATE v1.4 Roadmap
6 minutes
A preview of the next GATE release: output validation, break-glass formalisation, OWASP AISVS and MITRE ATLAS alignment, a Rust library, and …
The Regulatory Stack, Part 6: Building Under the CRA - A Reference Architecture
11 minutes
A production-grade reference architecture translating the GATE specification into a live runtime, using Apigee, Envoy Proxy, and …
The GATE Conformance Runner: What You Can Automate and What You Cannot
8 minutes
The gate-conformance v1.2.0 runner automates 9 of GATE's 19 checks against a live evidence store. The other 10 return PARTIAL: not failure, …
GATE v1.3: New Controls for Shadow Agents, Data Quality, and Model Drift
4 minutes
GATE v1.3 adds three new controls and a CLI conformance runner to the Governed Agent Trust Environment, closing three assumptions that …
The Regulatory Stack, Part 4: Engineering Under the AI Act - Article 15 Cybersecurity in Practice
10 minutes
How to turn the EU AI Act's stringent cybersecurity requirements into a clean, automated side effect of your existing platform engineering …
GATE: The Missing Infrastructure Layer for Agentic AI
6 minutes
Prompt guardrails are not governance. When AI agents can take real-world actions at machine speed, you need deterministic enforcement at the …
Trustworthy AI Agents: The Trustworthy AI Blueprint
5 minutes
Bringing together all 16 primitives into a single, coherent architecture. The capstone: Operational Risk Modeling.
Trustworthy AI Agents: Human-in-the-Loop Governance
8 minutes
The ultimate safety primitive: defining when humans intervene, approve, constrain, or override autonomous decisions.