Pillar 06 · Govern
A GLI-19 certificate proves the RNG was fair on test day and says nothing about the build running tonight. How to make fairness a monitored control, not a certificate on the wall.
IDD’s product oversight and governance duties are usually discharged as committee minutes. Encoded as tracked product-lifecycle data, they become demonstrable to a supervisor rather than anecdotal.
Why a public, cache-heavy API landed on /v1/ path versioning over Accept-header or media-type versioning, and the narrow cases where headers genuinely win.
Detection rules deserve the same lifecycle as application code: authored, tested against replayed attack and benign telemetry, staged, deployed and measured for efficacy.
A GUI-created scheduled task is invisible to version control and impossible to review in a pull request. The case for Register-ScheduledTask, XML export and git.
Generate an ed25519 GPG key, configure gpg-agent and pinentry, wire git to sign every commit, and get the Verified badge on both Linux and Windows.
Article 17’s quality management system for high-risk AI is documented, auditable process across the model lifecycle. Map it onto your existing SDLC rather than standing up a parallel bureaucracy.
Most pre-commit setups are decorative: they run on the author’s machine, if at all. Here is a pinned config plus a CI job that enforces it even after –no-verify.
Automating a broken process makes the business bad at the process faster. This is one of the oldest observations in operations management, and technology teams rediscover it painfully, at real cost, every time a new tooling category makes automation newly tempting — which is, currently, constantly. I’ve written about the data model and the architectural …
Every individual engineer using AI assistance reports feeling faster. Measured at the system level — release cadence, defect rate, time from idea to production — a meaningful number of organisations adopting AI-assisted development are getting slower, not faster. Both observations are true simultaneously, and the gap between them is one of the more important things …