JAJoão André Marquesinasqav.hashnode.dev·Sep 20 · 3 min readEU AI Act Audit Trail Requirements: What You Need Before the DeadlineThe EU AI Act becomes enforceable for high-risk AI systems on 2 December 2027 (Annex III standalone systems) and 2 August 2028 (high-risk AI embedded in regulated products), under the Digital Omnibus 00
JAJoão André Marquesinasqav.hashnode.dev·Sep 20 · 3 min readDORA AI Compliance: How Financial Services Can Prove Agent Actions Are Tamper-EvidentDORA (Regulation EU 2022/2554) has applied since January 17, 2025. It is already fully enforceable. If your financial entity uses AI agents that access customer data, execute transactions, or make ope00
JAJoão André Marquesinasqav.hashnode.dev·Sep 20 · 3 min readWhy AI Agent Logs Aren't Enough: Building Cryptographic Proof for Every ActionLogs were designed for debugging, not for proof. A log entry tells you what the application claims happened. It does not tell you whether that claim is trustworthy. For regulated environments under th00
JAJoão André Marquesinasqav.hashnode.dev·Sep 20 · 3 min readNIST FIPS 204 (ML-DSA) Explained for AI Agent ReceiptsNIST finalized FIPS 204 in August 2024, defining ML-DSA (Module-Lattice-Based Digital Signature Algorithm) as the post-quantum signature standard. If you are building systems that need long-lived audi00
JAJoão André Marquesinasqav.hashnode.dev·Sep 20 · 3 min readReplay What Your AI Agent Did, Step by StepAudit trails prove what happened. But when an incident occurs and you need to reconstruct exactly what an agent did over a session, scrolling through raw signature records is not practical. You need a00
