EU AI Act Audit Trail Requirements: What You Need Before the DeadlineThe EU AI Act becomes enforceable for high-risk AI systems on 2 December 2027 (Annex III standalone systems) and 2 August 2028 (high-risk AI embedded in regulated products), under the Digital Omnibus Sep 20 · 3 min readasqav.hashnode.dev
DORA AI Compliance: How Financial Services Can Prove Agent Actions Are Tamper-EvidentDORA (Regulation EU 2022/2554) has applied since January 17, 2025. It is already fully enforceable. If your financial entity uses AI agents that access customer data, execute transactions, or make opeSep 20 · 3 min readasqav.hashnode.dev
Why AI Agent Logs Aren't Enough: Building Cryptographic Proof for Every ActionLogs were designed for debugging, not for proof. A log entry tells you what the application claims happened. It does not tell you whether that claim is trustworthy. For regulated environments under thSep 20 · 3 min readasqav.hashnode.dev
NIST FIPS 204 (ML-DSA) Explained for AI Agent ReceiptsNIST finalized FIPS 204 in August 2024, defining ML-DSA (Module-Lattice-Based Digital Signature Algorithm) as the post-quantum signature standard. If you are building systems that need long-lived audiSep 20 · 3 min readasqav.hashnode.dev
Replay What Your AI Agent Did, Step by StepAudit trails prove what happened. But when an incident occurs and you need to reconstruct exactly what an agent did over a session, scrolling through raw signature records is not practical. You need aSep 20 · 3 min readasqav.hashnode.dev
