Model Coverage, Routing, and Failover in Smartflow: What Enterprise AI Gateway Support Actually Means
Guides

Model Coverage, Routing, and Failover in Smartflow: What Enterprise AI Gateway Support Actually Means

How Smartflow supports any LLM endpoint through registry-based architecture, and how client-defined routing, failover, and task routing work. Model support is an architecture question, not an integration count.

Craig Alberino · Jul 29, 2026 · 5 min read min read
OpenAI, Hugging Face, and the Deployment Flag
AI Governance

OpenAI, Hugging Face, and the Deployment Flag

The attacking models ran with cyber refusals reduced for an eval. The responders ran with guardrails at full strength and got refused. The variable that decided who got capability was a deployment flag. OpenAI's fix concedes the missing layer and raises the harder question of who should own it.

Craig Alberino · Jul 22, 2026
Governed AI for Multinational Hotel Operations: China, Saudi Arabia, and the EU
Guide

Governed AI for Multinational Hotel Operations: China, Saudi Arabia, and the EU

How international hotel groups deploy AI agents across mainland China, Saudi Arabia, and the EU without moving guest data across borders. Global policy, local enforcement, portable evidence.

Craig Alberino · Jul 16, 2026
The Assembly and the Assembler
AI Governance

The Assembly and the Assembler

The biggest names in AI and private capital just stood up services firms to make enterprise AI work. The ratio behind the move is one to six. There are two ways to sell that layer: as hours, or as a machine.

Craig Alberino · Jul 16, 2026
The Routing Layer Gets Named From Three Directions
wopr-signal

The Routing Layer Gets Named From Three Directions

Three constituencies named the routing layer between May 4 and July 12: capital, the channel, and the developer mainstream. All three agree on the position. None includes identity, inline policy, or evidence.

Craig Alberino · Jul 15, 2026
WOPR

The WOPR Brief: your monitoring stack is now an attack surface

This month an attacker turned Claude Code into a code-execution engine. On developers' own machines. No

Craig Alberino · Jun 30, 2026
Loops Moved the Work Up a Level. The Risk Moved Down One.
AI Governance

Loops Moved the Work Up a Level. The Risk Moved Down One.

The field moved from prompting agents to designing the loops that run them. The developer conversation has the right cautions. Inside a regulated enterprise, the loop's connectors reach actions that do not reverse, and what the agent sends to the model is a disclosure on its own.

Craig Alberino · Jun 15, 2026
Two Postures on the Agent Call Path
Agent security

Two Postures on the Agent Call Path

Two postures. etect above the path. A control watches behavior and flags what looks wrong. Enforce on the path. A control sits inline, in the request itself. One tells you what happened. The other decides whether it happens.

Craig Alberino · Jun 8, 2026
Mythos, Daybreak, and the System Around the Model
AI Governance

Mythos, Daybreak, and the System Around the Model

A restricted frontier model leaked into a proxy this week before its evaluation finished. It raises the question two cyber systems already posed: is the capability the model, or the system around it? On offense, mostly the system. On defense, that answer is where the moat sits.

Craig Alberino · Jun 7, 2026
The Strategy Behind Open-Sourcing Shield
Open Source

The Strategy Behind Open-Sourcing Shield

Free developer tools as a wedge into enterprise security is a known pattern. Here is why APERION ran it on purpose, and what we expect it to do.

Craig Alberino · May 31, 2026
WOPR

Workflow Platforms Consolidate While Intelligence Community Names Runtime Controls

Microsoft Agent 365, the Five Eyes joint advisory, ServiceNow's AI Control Tower expansion, and the Zscaler-Symmetry acquisition described two distinct supervisory layers.

Craig Alberino · May 31, 2026
WOPR

An LLM Agent Composed a Four-Pivot Intrusion in Real Time

Sysdig documented its first agent-driven intrusion: a reasoning model, not a pre-built playbook, improvised the path from a Marimo CVE to a database dump.

Craig Alberino · May 31, 2026