All Writing
Published Analysis
Agent Intervention Taxonomy
A governance framework for organisations deploying autonomous AI agents in production — structured across five intervention pillars with implementation prioritisation for Risk, Control, and Board-level oversight.
The AI vulnerability your governance program has not planned for.
Prompt injection is an integrity failure that no security product can currently solve as a class. What this means for every organisation deploying AI agents under FINMA, EU AI Act, and GDPR.
The monitoring gap NIST cannot close.
NIST AI 800-4 documents deceptive AI behavior as an unsolved security monitoring problem. Pre-deployment evaluations exist — but face a structural ceiling. What this means for agentic deployments in regulated industries.