AAgentic Trainers·13h agoWho Guards the AI Guardrails? Five Independence Tests for Any AI Agent Oversight ToolVendors now sell the agents and the tools that police them. Here's how to check whether the checker is independent.30 min read·agentictrainers.hashnode.dev
RRain S·1d agoAI Execution Governance, Part 11: Revocation Hands Over Three Records, Not One "Stopped"An outbound write is in flight. In another window, an administrator revokes the role of the user who started it. Minutes later someone asks: did that call stop? If the system answers only "stopped", t6 min read·keelbase.hashnode.dev
RRain S·3d agoAI Audit Evidence, Part 6: A Record Nobody Read Is Only StoredA record sat in the database for a year before anyone opened it. That is not negligence. There is no place in the system that says who should read it, or how often. One sentence: a record was written4 min read·keelbase.hashnode.dev
KKarthik Gokul·6d agoWho Decides What an AI Agent Is Allowed to Do?Design explicit AI agent authorization with scoped approvals, trusted identity, execution checks, and practical failure-path tests.4 min read·nuroenai.hashnode.dev
RRonan Oliveira·6d agoFrom policy PDF to runtime: enforcing AI governance on every agent callHow contextual security policies (CSP) with scope inheritance turn AI governance into rules enforced at runtime: RBAC, schedule, data, behavior, with evidence.3 min read·zihinai.hashnode.dev
RRain S·Nov 4AI Execution Governance, Part 10: Can Revocation Stop a Call That Is Already Running?A tool call has passed the gate and is running. Now the role is revoked. Does it stop, or does it finish? Ours finishes. Revocation governs the next call, not this one. That is not the intent of the d5 min read·keelbase.hashnode.dev12A
RRain S·Nov 2AI Execution Governance, Part 9: Revocation Complete Is a Conclusion, Not a Status FieldA side-effect row reads revoke_status = revoked. On the screen it becomes a green badge that says revoked. Those three words are not a field value. They are a conclusion, and a conclusion is supposed5 min read·keelbase.hashnode.dev2A
KKazem Mortazavi·Oct 31Shadow AI: Managing Unapproved AI Tools Without Driving Them UndergroundEmployees no longer wait for IT approval to draft a report, analyze a spreadsheet, or write a few lines of code. They open a public chatbot and get the job done. That convenience has created a risk th3 min read·securityland.hashnode.dev
GGeorge Ezejiofor·Oct 29GRC Open-Source Tools: Falco, Wazuh & Probo (CrowdStrike/Vanta Alternative, Zero SaaS Bills)GRC Open-Source Tools: Falco, Wazuh & Probo (CrowdStrike/Vanta Alternative, Zero SaaS Bills)24 min read·georgeezejiofor.com
RRain S·Oct 28AI Execution Governance, Part 8: Actions the Tool Registry Does Not Know AboutOne application, one events table, two rows. One row comes from your AI assistant: it calls create_event, a registered tool marked R3 that waits for your confirmation. The other comes from POST /api/v16 min read·keelbase.hashnode.dev
