标签：#Governance

The EU-funded XAIDA project is using artificial intelligence to help researchers detect, analyze and attribute extreme weather events, including heatwaves, in a changing climate. Its work matters because better understanding of the link between climate change and individual extremes can support more informed decisions over time. But XAIDA is not launching a consumer weather app, a commercial forecasting service, or a ready-to-integrate API for businesses. XAIDA, short for eXtreme events: Artificial Intelligence for Detection and Attribution , began in 2021 under the EU's Horizon 2020 programme. The project brings together European research groups working on data-driven methods for extreme-weather science. Its official tools overview describes a collection of AI-enabled capabilities designed to support science, policy and decision-making. That distinction is important. A weather forecast estimates likely conditions at a particular place and time. XAIDA's work is focused more broadly on detecting extreme phenomena, examining their characteristics and quantifying the influence of climate change. These are related to prediction, but they are not the same as publishing a daily operational forecast for a business location. What XAIDA is building XAIDA's public materials describe the Artificial Intelligence for Disentangling Extremes , or AIDE, toolbox alongside related AI-based methods. The project also refers to stochastic weather generation and other analytical approaches. Together, these tools are intended to help researchers investigate complex extreme events and their climate context. The project has used AI techniques, including variational autoencoders, in case studies and research outputs concerning heatwaves and other extremes. A variational autoencoder is a machine-learning approach that can learn patterns in complex data and generate statistically plausible variations. In this context, such methods can help researchers examine how extreme events relate to under

Il rischio reale dell'AI enterprise non sono gli agenti autonomi. È la complessità tra di loro. Executive Briefing — Settembre 2026 Quando le aziende deployano fleet di agenti AI invece di sistemi singoli, il pericolo vero non è un agente che si mette a fare il matto da solo. È la complessità emergente delle loro interazioni: una ragnatela di chiamate a cascata, permessi dimenticati e gap di accountability che nessuna checklist può chiudere. 1. Il problema che nessuno vede arrivare Le aziende non deployano un agente e lo guardano girare. Deployano fleet: bot di supporto, agenti di retrieval, layer di orchestrazione, ognuno che chiama API, delega ad altri agenti, si infila in sistemi che non erano stati progettati per decisioni automatiche. Lo scenario che dovrebbe farvi perdere il sonno non è un singolo agente che combina un guaio. È cento agenti che fanno esattamente quello per cui sono stati costruiti, tutti insieme, in combinazioni che nessuno ha disegnato. La complessità non cresce linearmente col numero di agenti. Aggiungi un secondo agente e aggiungi una connessione. Aggiungi il decimo e potenzialmente aggiungi decine di connessioni, perché ora qualsiasi agente può chiamarne un altro, e ogni chiamata può scatenarne una terza altrove. Un ticket di supporto che prima toccava un solo sistema oggi può passare attraverso quattro agenti prima che un essere umano lo veda. E ogni passaggio è un punto decisionale non approvato. La maggior parte dei programmi AI enterprise si blocca quando gli umani responsabili perdono il filo. Chiedete a un team security quali agenti possono raggiungere quali sistemi, e otterrete silenzio. Chiedete quale agente ha triggered quale downstream action tre salti fa. Ancora silenzio. 2. Perché le checklist non funzionano L'istinto è trattarlo come compliance: approva l'agente, registralo, passa oltre. Ma una checklist valuta un singolo punto nel tempo. La complessità corre lungo una catena, e non puoi governare una catena con una pila di ap

Enterprise AI's real risk isn't autonomous agents. It's the complexity between them. Executive Briefing — September 2026 When enterprises deploy fleets of AI agents instead of single systems, the real danger is not a rogue agent. It is the emergent complexity of their interactions — a web of cascading calls, forgotten permissions, and accountability gaps that no checklist can fix. 1. The problem nobody sees coming Enterprises do not deploy one agent and watch it run. They deploy fleets: support bots, retrieval agents, orchestration layers, each calling APIs, delegating to other agents, reaching into systems that were never designed for machine decision-makers. The failure mode that should keep you up at night is not a single agent doing something bad. It is a hundred agents doing exactly what they were built to do, all at once, in combinations nobody designed for. Complexity does not grow linearly with agent count. Add a second agent and you add one connection. Add a tenth and you potentially add dozens, because any agent might call any other, and each call can trigger another somewhere else. A support ticket that used to touch one system might now pass through four agents before a human ever sees it. Every handoff is an undocumented decision point. Most enterprise AI programs stall when the humans responsible lose the thread. Ask a security team which agents can reach which systems, and you get silence. Ask which agent triggered which downstream action three hops ago. More silence. 2. Why checklists fail The instinct is to treat this like a compliance checklist. Approve the agent. Log the agent. Move on. But a checklist checks a single point in time. Complexity runs across a chain, and you cannot govern a chain with a stack of one-time approvals any more than you can call a diet successful because you had a vegetable once. Two failure modes dominate. Permissions creep. Somebody builds an agent to summarize support tickets and grants it broad API access because scop

The European Union's Roam Like at Home regime now extends to Moldova and Ukraine, broadening the area where travellers can use mobile calls, SMS and data at their domestic price. For companies whose staff travel, work in the field or coordinate operations across these markets, the change can make mobile spending more predictable and reduce a familiar source of cross-border friction. The extension was approved by the Council of the EU in July 2025 for application from 2026. The Council's official announcement on the roaming extension confirms that Moldova and Ukraine were set to join the EU roaming area from 1 January 2026. Follow-up EU updates recorded Ukraine's formal accession in Kyiv on 12 January 2026. In practical terms, a customer from an EU country, Moldova or Ukraine can use their domestic mobile plan while roaming in the other participating areas, rather than facing a separate retail roaming tariff. The arrangement is not a blanket promise of unlimited use abroad, however. It operates under the established Roam Like at Home framework, including fair-use policies, sustainability derogations and wholesale roaming charges. What the extension changes for cross-border work For a travelling employee, a mobile connection is part of the working toolkit. Calls with customers, two-factor authentication messages, map and logistics apps, messaging platforms and cloud services can all rely on roaming data. Bringing Moldova and Ukraine into the same roaming area gives businesses a clearer basis for planning those routine costs when staff move between the EU and either country. The change also matters for service consistency. EU communications around the extension stress that roaming customers should receive the same quality of service available at home, including access to technologies such as 4G where those are available under the domestic service. That principle is important for work that depends on stable mobile data, although real-world performance will still depend

Enterprise vibe coding: the governance framework for shipping AI-generated apps to production Published: August 22, 2026 Category: Enterprise · AI Deployments Reading time: 9 minutes Author: NEXUS AI Team Gartner forecasts that 40% of new enterprise production software will be built using vibe coding techniques by 2028. A 2026 scan of more than 1,400 live vibe-coded applications found that 65% already had a security issue, and 58% shipped with at least one critical vulnerability. Those two numbers describe the same industry moving in opposite directions at once: adoption is outrunning governance. This post covers what a governance framework for enterprise vibe coding actually looks like, the five controls it needs, and where most teams get it wrong. What is enterprise vibe coding? Enterprise vibe coding is the practice of using natural-language prompts to generate application code, then governing that code through mandatory review, access control, and audit before it reaches production, rather than letting it ship straight from a prompt to a live endpoint. The term (coined by Andrej Karpathy in early 2025) originally described a fast, low-friction way for one person to build a prototype. What "enterprise" adds is the governance layer prototyping was never built for: staging environments, encrypted secrets, role-based access, and a record of who approved what. That distinction matters because the adoption curve and the risk curve are not moving together. The governance gap, in three numbers 40% of new enterprise production software will be built using vibe coding techniques by 2028, according to Gartner's May 2025 report "Why Vibe Coding Needs to Be Taken Seriously," as reported by CIO Dive . 65% of vibe-coded production applications had a security issue, in a 2026 scan of more than 1,400 live apps by the API security firm Escape.tech, reported via a Cloud Security Alliance research note . 58% of those same applications shipped with at least one critical vulnerabilit

Cloudflare has recently detailed how it is using AI to transform internal engineering standards from passive documentation into an actively enforced control system across the software development lifecycle. By Craig Risi

The European Commission’s 2022 procurement for a participatory foresight study on next-generation online platforms placed platform design and consumer behaviour within a wider policy question: how could the platform economy evolve, and what might those changes mean for European Union policymaking? The work was not a narrow experiment on marketplace user experience. Instead, it was a two-year exercise intended to identify long-term trends across online platforms and assess their policy implications. The Commission published the call, reference CNECT/2022/OP/0049 , in August 2022. Its official announcement of the foresight study on the future of online platforms lists a submission deadline of 22 September 2022 at 16:00 CEST . That makes the procurement a completed historical call, rather than a current tender opportunity. The framing remains relevant because interface design, recommendation systems and other platform choices can influence what people notice, compare and select online. But the Commission’s stated objective was broader than any one marketplace design question. It sought a structured view of the platform economy’s possible future trajectories and the public-policy issues those trajectories could raise. What the 2022 study was designed to examine The Commission described the project as a two-year participatory foresight study . Participatory foresight brings relevant groups into a structured exploration of future developments rather than attempting to predict one fixed outcome. In this case, the study was designed to identify ten topics in collaboration with Commission services, then examine long-term trends and their potential policy relevance. Design’s influence on consumer behaviour was part of the broader theme, not the full scope of the procurement. That distinction matters. A study focused solely on a marketplace interface might measure how a particular ranking, default or layout affects a defined consumer decision. The Commission’s foresight work i

Everybody says AI governance matters. They are right. But that is the easy part. The harder part is...

The European Commission has updated its guidelines for teachers and educators on tackling disinformation and promoting digital literacy, extending the guidance to address generative AI , influencer dynamics and prebunking . The refresh gives schools and education professionals new materials for helping young people assess online information and build resilience against misleading content. The revised guidance sits within the EU's Digital Education Action Plan (2021-2027) . According to the European Commission publication record for the updated guidelines , the Directorate-General for Education, Youth, Sport and Culture released the updated publication on 4 June 2026. The update matters because the information environment facing pupils has changed substantially since the original guidance was issued. Generative AI can now be relevant to how online content is created, altered and spread. At the same time, social-media reliance and influencer-led information dynamics have become more prominent considerations for digital literacy education. The Commission's revised material positions educators and schools as part of the response, rather than treating disinformation solely as a platform or policy problem. What the updated EU guidance adds The updated guidelines are one element of a wider package of digital education and online-safety work. European Commission press materials published on 5 March 2026 described four sets of guidelines, comprising two new sets and two updates. The digital literacy and disinformation guidance was among the updated materials, with explicit attention to generative AI and contemporary online dynamics. A Better Internet for Kids summary published on 10 March 2026 identified several practical and policy-oriented additions. These include: Lesson plans and an updated glossary to support classroom use. Consideration of generative AI's impact on disinformation . Coverage of social-media reliance and the role of influencers in shaping information exp

The European Union's AI Act establishes a risk-based framework for AI systems that ranges from prohibited practices to minimal-risk uses. Regulation (EU) 2024/1689 divides the framework into four levels: unacceptable risk, high risk, limited risk and minimal risk. For AI developers, vendors and enterprises, the practical importance is straightforward: the system's risk category determines whether it can be used and, if so, the level of compliance, transparency and governance expected around it. The regulation entered into force on 1 August 2024 . Its four-tier approach is designed to avoid applying the same regulatory burden to every AI use case. Instead, the Act reserves its strictest treatment for systems that present the greatest risk, while leaving minimal-risk systems without additional sector-specific obligations under the AI Act beyond general law. The definitive reference is the official text of Regulation (EU) 2024/1689 . Although older explainers may use slightly different labels for transparency-related obligations, the final binding regulation is consistently described by EU institutions as a four-level risk framework. The EU AI Act's four risk levels The categories are not simply labels for how sophisticated an AI model is. They are a regulatory method for connecting an AI system's use and potential impact with corresponding obligations. A business cannot determine its position merely by calling a tool "low risk". It needs to assess the system against the Act's framework and the obligations associated with the applicable category. Risk level Regulatory position Core consequence Unacceptable risk Prohibited AI practices The practices are banned outright. High risk Systems subject to extensive obligations Requirements include conformity assessments and risk management. Limited risk Systems subject to certain requirements Transparency and oversight requirements apply in relevant cases. Minimal risk Most AI systems No additional sector-specific AI Act oblig

The European Union's voluntary General-Purpose AI Code of Practice gives providers of general-purpose AI models a practical framework for supporting compliance with the EU AI Act. Finalised in July 2025, the code addresses transparency, copyright, and safety and security. Its public signatory list includes major AI and technology companies, but official EU material does not support claims that roughly 190 organisations have signed the GPAI code. The distinction matters for companies assessing AI suppliers. Signing the code can signal engagement with the EU's emerging governance expectations, but it is not a substitute for examining a provider's specific commitments, documentation, and product-level controls. The European Commission describes the code as a voluntary instrument, and its official GPAI Code of Practice page states that the signatory process and public information continue to be updated. What the GPAI Code of Practice covers The code is designed for providers of general-purpose AI models, a category that can include models used across multiple downstream applications. Rather than creating a separate legal regime, it is intended to help providers demonstrate how they can meet relevant AI Act obligations . Its three chapters cover different aspects of provider responsibility: Transparency: commitments related to information and documentation that can help downstream providers understand and use general-purpose AI models appropriately. Copyright: measures intended to address copyright-related obligations for providers of general-purpose AI models. Safety and security: commitments focused on managing risks associated with the most capable models, including systemic-risk considerations where applicable. Code chapter Primary focus Why it matters to AI buyers Transparency Provider information and documentation Helps buyers assess whether a model provider can supply information needed for downstream use. Copyright Copyright-related provider commitments Relevant

The Observability Black Box As autonomous AI agents evolve from isolated chat assistants into multi-agent systems executing multi-step business logic across databases, APIs, and microservices, enterprise platform teams face an acute operational challenge: black-box opacity. When an autonomous agent fails, hallucinates, or executes an out-of-bounds API call, traditional Application Performance Monitoring (APM) tools fall short. Standard HTTP request logging and basic prompt-response captures cannot reconstruct the non-deterministic reasoning loops, tool selection branches, or sub-agent delegations that led to an incident. Furthermore, enterprise auditors, security teams, and regulatory bodies (governed by SOC 2, FedRAMP, and the EU AI Act) now require non-repudiable proof of agent execution. Organizations must be able to answer five fundamental questions for every production run: Which human or non-human identity authorized the agent run? What planner reasoning path or tool routing logic was chosen? Which exact data assets or vector embeddings were retrieved into context? What was the precise execution latency, token cost, and error tax of each intermediate step? Can the complete execution graph be cryptographically reconstructed for compliance review? To resolve this challenge, platform engineering teams must deploy Audit, Observability & Lineage —an architecture anchored in OpenTelemetry (OTel), OWASP Agent Observability Standards, and immutable lineage graphs. Deep-Dive Architecture: OpenTelemetry & Lineage Integration A production-grade Agent Observability stack avoids proprietary vendor lock-in by standardizing on OpenTelemetry (OTel) OTLP trace ingestion and open metadata stores. 1. The Unified OpenTelemetry Span Tree Every agent execution unit — from user intent trigger to final task completion — is encapsulated within a single root trace context ( agent.run ). Sub-tasks, tool calls, and model invocations are recorded as hierarchical child spans: [ Root Trace:

By Suvankar Chakraborty | Principal Engineer — IAM, Modern Workplace Management & IT Operations The Collaboration Platform That Became a Governance Nightmare Microsoft Teams was deployed at extraordinary speed across the enterprise world. In most organisations I know, the deployment timeline went something like this: March 2020, global pandemic, remote work mandate, Teams switched on, everyone told to use it, governance deferred because there was no time. Five years later, the governance that was deferred in 2020 has still not been implemented in most of those environments. The result is predictable and consistent across industries: Teams sprawl at industrial scale. Hundreds of Teams that nobody owns. Channels for projects that ended three years ago. Guest users from partnerships that dissolved. Sensitive conversations in channels that include contractors who should not have visibility. Files shared in Teams chat — bypassing SharePoint governance entirely — on devices with no management policy. Meeting recordings stored in OneDrive folders that anyone with a link can access. Bot integrations that have permissions to read your Teams messages and access your calendar, approved by a user who clicked through an OAuth consent screen without reading it. In 13+ years of enterprise IAM and IT operations work, Teams governance has become one of the most consistently mismanaged areas of Microsoft 365. Not because it is technically difficult — the controls Microsoft provides are comprehensive. But because Teams sits at the intersection of IT, security, compliance, and the organisational culture of collaboration, and that intersection is where governance programmes go to die. This article is about why enterprises get Teams governance wrong, and what getting it right actually looks like — in specific, actionable, implementable terms. Why Teams Is a Governance Problem Unlike Any Other M365 Workload To understand the governance challenge, you need to understand what Microsoft Team

Part 1 documented the recurring snapback in practice. This note asks a narrower question: what does the observed pattern support, what remains a working hypothesis, and what changes should follow in the project? Status: Bounded project conclusion. This note separates observed behaviour, working hypothesis, and practical consequence. It is based on current project documents and interactions; it is not external validation or a universal claim about AI systems. What the evidence supports 1. The project already contains a stable relational model The working model is not generic “AI assistance.” It separates reasoning surfaces, uses bounded comparisons, permits two-way cognitive pressure, and keeps final acceptance authority with the human. Reciprocal cognitive contribution, asymmetrical governing authority. 2. Concrete project work preserves the structure better than public abstraction At the concrete level, instructions such as: Review this proposal against that architecture. preserve the distinction between the object being reviewed, the surface applying pressure, the evidence, and the authority that may accept a change. When the same structure was compressed into general prose, generated explanations repeatedly returned to a simpler one-way model of either human control or transferred AI authority. That is an observed pattern in this development process. 3. Public explanation is a separate reasoning surface A README, article, summary, or portfolio page is a projection of the model, not the model itself. It cannot be assumed to reproduce the internal structure faithfully merely because that structure is present in context. The explanation must be reviewed against the model it represents: Does this explanation preserve the actual authority, review, evidence, and state-transition structure? 4. Annoyance was useful boundary data The irritation indicated that the generic rendering was no longer merely an imperfect exploration. It was colliding with an internal frame that

Most agent platforms give you one configuration file and hope. When you are running agents for more than one team — or more than one customer — a single config breaks down fast. Each workspace needs its own model, its own service access, its own secrets, but someone has to guarantee that no workspace can spend more than its budget or reach a service it was never authorized to use. The answer is a policy cascade. Every setting — model, temperature, allowed services, API keys, skill availability, TTL defaults — resolves through three ordered tiers: company, repo, and workspace. A lower tier can narrow an upstream ceiling but never widen it. That single rule is what makes it safe to hand a workspace to a team without handing them the keys. How the cascade resolves Three tiers, bottom-up. The company tier sets the floor. The repo tier overrides it. The workspace tier overrides both. The resolution order is fixed for every kind of setting: Kind Company tier Repo tier Workspace tier Policy fields defaults override override Variables floor override override Skills floor override override Secrets last-resort fallback override first-resolved Notice that secrets run in reverse. A workspace-tier credential wins over the repo and company defaults, and an empty value at the workspace tier falls through to the repo. This means you set a per-customer token where it is used and fall back up the chain only when it is absent. You are never forced to duplicate credentials across every workspace. Narrow-only: the safety property The cascade is not a free-for-all override. For service access, budgets, quotas, and TTL defaults, a lower tier can only narrow what the tier above it allows. If the company grants a repo [github, slack, search] , a workspace under that repo can select a subset — [github, search] — but it cannot add linkedin . The resolve-time intersection is enforced, not advisory. This extends to per-service API surface control. Granting access to GitHub does not mean grantin

When a new platform team set out on implementing their roadmap through forced workflows with poor documentation, developer experience declined. Success came from simplifying governance, prioritizing what matters, and rolling out compliance incrementally through prevention, detection, and communication. Empathy, focus, and shared purpose drove successful adoption. By Ben Linders

Many enterprise AI governance discussions start with frameworks. Frameworks are useful. They help organizations define principles, roles, controls and accountability. But when an enterprise starts using generative AI in real workflows, the practical governance problem often appears somewhere much more specific: the AI access path. That is the moment when an employee, application, copilot, agent or API workflow sends a request to an AI model. At that point, governance becomes operational. The practical governance questions Before an AI request reaches a model, an enterprise may need to answer several concrete questions: Who is sending the request? What business use case is involved? What data is being sent? Which AI model is being used? Is the model approved for this use case? Should sensitive data be masked or blocked? Was the access decision recorded? Can the activity be reviewed later? Can AI usage and token cost be explained by user, department, model and use case? These questions are not only policy questions. They are architecture questions. If the enterprise cannot answer them at the access path, AI governance may remain too far away from the real system behavior. Why the access path matters Many organizations already have AI policies. But policies are often written before or after the actual AI interaction. The access path is where policy meets execution. For example, a team may approve the use of generative AI for internal productivity. But the organization still needs to understand: whether customer data is being included in prompts; whether employees are using approved or unapproved models; whether sensitive content is being sent to external services; whether different departments are using AI in very different ways; whether audit evidence exists when an incident or review happens. This is why AI governance should not only be treated as a document, committee or training program. It also needs a technical control point. A simple access governance pattern A

AI makes the first 80% of development feel fast, but hides architectural complexity until it's too late. To prevent system instability, engineering leaders must shift from raw throughput to systemic comprehension. By unifying spec-anchored SDD, TDD, and automated fitness functions into a repo-bound "Context Store," teams can ensure AI agents and human reviewers evolve code safely. By Stella Berhe, Stephan Bragner, Vikram Maran, Anand Jayaraman

A panel on data ownership challenged the definition of "ownership," arguing it must extend beyond simple account control to include structural independence, interoperability, and community governance. Speakers like Zenna Fiscella, Paul Frazee, Boris Mann, and Robin Berjon emphasised the need for shared standards, unbundled platforms, and better tools to support user sovereignty. By Olimpiu Pop

From Optimization to Protection: Adding a Security and Governance Agent to Your Snowflake Multi-Agent Team (Part 3) In Part 1 , we built an Admin Agent for usage and cost visibility. In Part 2 , we added a Cost Optimizer Agent and an Orchestrator that routes questions to specialists. Now we close the loop with the third specialist: a Security and Governance Agent . This turns your assistant from "what happened" and "what to optimize" into a full team that also answers "what is risky right now". By the end of this post, you will have: A Security and Governance Agent with focused security tools Security semantic views mapped to natural language Orchestrator routing across Admin, Cost Optimizer, and Security agents A practical triage workflow for failed logins, privilege risk, and unauthorized access Why Add a Security Specialist? The first two agents are strong for operations and spend, but security requires a different lens: Access control and role hygiene Failed login patterns and anomaly detection Unauthorized access attempts Inactive users with active privileges Compliance-friendly audit summaries Could one large agent do everything? Sometimes. But specialized agents are easier to maintain, safer to evolve, and easier to test. Final Team Architecture User Question (natural language) | Orchestrator Agent / | \ Admin Cost Security Agent Optimizer Governance Agent \ | / Unified Response Role of each specialist Admin Agent: usage, credits, storage, operational metrics Cost Optimizer Agent: idle compute, rightsizing, optimization opportunities Security and Governance Agent: roles, privileges, failed logins, unauthorized access, audits The Security Pattern (Same Foundation as Parts 1 and 2) Step 1: Base Views Create security-focused views over SNOWFLAKE.ACCOUNT_USAGE , including: Role hierarchy and privilege grants Failed login attempts and anomaly severity Excessive or unused privileged access Unauthorized access attempts User and role audit summaries Network policy ac