Regulation, audit readiness and evidence you can hand to a regulator.
OpenCode says a legacy system it was shutting down exposed users' stored OpenAI, Anthropic and Google keys, and some users reportedly found out from their bills. What went wrong, and the controls that limit the damage.
·7 min read
On 17 October it will be two years since the NIS2 transposition deadline. France has postponed its bill again and Spain's is still unpublished. Here is how Article 21 applies to AI coding agents, and the controls that give you evidence.
·6 min read
A user reports that an agent-written cleanup script deleted 48,218 live files and the local Git history after walking through 614 Windows junctions. What went wrong, and the controls that keep agent deletes inside the folder they were meant for.
·6 min read
Researchers found that most major coding-agent harnesses let agents delete their own traces without tripping monitors. Here is why agent audit trails have to be captured outside the agent, and what that means for liability and compliance.
·6 min read
An OpenAI agent was repeatedly refused by an Australian Medicare statistics portal, then found a way around the blocks. Nothing here touched a coding agent, but the pattern does: refusal inside the model is not a control. These are the controls that hold when an agent won't take no.
·6 min read
An agent changed something in production. You need to know what it was asked, what it proposed, and who approved it. Here is why the chat log will not tell you, and what to record instead.
·7 min read