Activation Is the Hard Part
9 minutes
Most marketing organisations spend on platforms that produce insight and starve the systems that act on it. This post argues that …
Tag
Strategy
Consent Is Data Engineering, Not Legal
10 minutes
Marketing teams buy a consent platform and approve a cookie banner, then assume the privacy problem is solved while personal data keeps …
Why Most Marketing Dashboards Lie
7 minutes
Two marketing reports from the same week, drawn from the same source system, can show opposite trends and both be correct. This post sets …
The Single Customer View Project That Actually Ships
7 minutes
Most Single Customer View projects run for years and never produce a customer view anyone trusts. This post identifies the four predictable …
Every Marketing Question Is Eventually a Data Question
6 minutes
Marketing teams keep buying tools to answer questions their underlying data cannot support. This post argues that every senior marketing …
GATE v1.4 Roadmap
6 minutes
A preview of the next GATE release: output validation, break-glass formalisation, OWASP AISVS and MITRE ATLAS alignment, a Rust library, and …
The GATE Conformance Runner: What You Can Automate and What You Cannot
8 minutes
The gate-conformance v1.2.0 runner automates 9 of GATE's 19 checks against a live evidence store. The other 10 return PARTIAL: not failure, …
GATE v1.3: New Controls for Shadow Agents, Data Quality, and Model Drift
4 minutes
GATE v1.3 adds three new controls and a CLI conformance runner to the Governed Agent Trust Environment, closing three assumptions that …
The Regulatory Stack, Part 5: The Cyber Resilience Act Closes the Last Loophole
10 minutes
Think your AI agent escaped the EU AI Act's high-risk classification? The Cyber Resilience Act lands more than a year earlier, and it …
Engineered Compliance: Beyond Templates
10 minutes
Regulators do not ask for documents. They ask for systems that behave a certain way and the ability to prove it. We introduce Sakura Sky's …
The Regulatory Stack, Part 4: Engineering Under the AI Act - Article 15 Cybersecurity in Practice
10 minutes
How to turn the EU AI Act's stringent cybersecurity requirements into a clean, automated side effect of your existing platform engineering …
The Regulatory Stack, Part 3: How the EU AI Act Made Verification a Legal Question, Not a Best-Practice One
13 minutes
The EU AI Act binds providers and deployers to a continuous, evidenced verification posture by December 2027. Here is the operational …