AI Safety Assurance Is Still Goodwill, Not Evidence
6 minutes
The UN's first scientific assessment of AI says safety assurance still runs on developer goodwill, not verification. Here is what …
Tag
Compliance
Consent Is Data Engineering, Not Legal
10 minutes
Marketing teams buy a consent platform and approve a cookie banner, then assume the privacy problem is solved while personal data keeps …
GATE v1.4 Roadmap
6 minutes
A preview of the next GATE release: output validation, break-glass formalisation, OWASP AISVS and MITRE ATLAS alignment, a Rust library, and …
The GATE Conformance Runner: What You Can Automate and What You Cannot
8 minutes
The gate-conformance v1.2.0 runner automates 9 of GATE's 19 checks against a live evidence store. The other 10 return PARTIAL: not failure, …
GATE v1.3: New Controls for Shadow Agents, Data Quality, and Model Drift
4 minutes
GATE v1.3 adds three new controls and a CLI conformance runner to the Governed Agent Trust Environment, closing three assumptions that …
The Regulatory Stack, Part 5: The Cyber Resilience Act Closes the Last Loophole
10 minutes
Think your AI agent escaped the EU AI Act's high-risk classification? The Cyber Resilience Act lands more than a year earlier, and it …
Engineered Compliance: Beyond Templates
10 minutes
Regulators do not ask for documents. They ask for systems that behave a certain way and the ability to prove it. We introduce Sakura Sky's …
The Regulatory Stack, Part 3: How the EU AI Act Made Verification a Legal Question, Not a Best-Practice One
13 minutes
The EU AI Act binds providers and deployers to a continuous, evidenced verification posture by December 2027. Here is the operational …
OWASP Just Drew a New Map, Read It Before Your Auditors Do
9 minutes
The Foundation's new strategic plan is not a community update. It commits OWASP to setting the technical floor for AI security, …
Sakura Sky Is Now a Vanta Partner
2 minutes
Sakura Sky is now a Vanta partner, helping GCP organisations streamline SOC 2, ISO 27001, and HIPAA with advisory support plus compliance …
Modern Data Architectures, An Opinion on Best Practices for Scalability and Security
5 minutes
What are the core principles and best practices for building a modern data architecture? Our opinion on scalable design patterns, security …
AI Compliance: Challenges, Opportunities, and Solutions for the EU AI Act
5 minutes
How is the EU AI Act is shaping global AI development? Here are some compliance strategies and industry-specific solutions for banking, …