AI Regulation

Regulation is read here for one thing: what it obliges an operator to produce, and when. Summaries are abundant; the mapping from obligation to evidence is not. These posts stay on that mapping. See the EU AI Act approach, the Digital Omnibus mapping, and what replaced SR 11-7.

FINRA Rule 3110 and AI Agents: A Supervision Guide
Guides

FINRA Rule 3110 and AI Agents: A Supervision Guide

Model risk guidance stepped back from agentic AI. FINRA did not. What Rule 3110 requires of a broker-dealer deploying AI agents, and what the supervisory record has to contain.

Craig Alberino · Sep 19, 2026
The CISO's Guide to Runtime Governance for AI Agents
AI Agents

The CISO's Guide to Runtime Governance for AI Agents

Craig Alberino · May 30, 2026
The Trust Fabric: A four-layer architecture for governing AI agents
AI Governance

The Trust Fabric: A four-layer architecture for governing AI agents

The Trust Fabric, a four-layer architecture for governing AI agents

Craig Alberino · May 21, 2026
Six Intelligence Agencies Just Published the Runtime Governance Spec
AI Regulation

Six Intelligence Agencies Just Published the Runtime Governance Spec

NSA, CISA, ASD's ACSC, Canadian Cyber Centre, NCSC-NZ, NCSC-UK. Thirty pages. The recommended controls map directly to the runtime plane that workflow platforms do not address.

Craig Alberino · May 14, 2026
Smartflow Sovereign: Built for the EU AI Act
AI Regulation

Smartflow Sovereign: Built for the EU AI Act

The runtime evidence the EU AI Act asks of high-risk systems, due December 2, 2027 for Annex III, and how Smartflow Sovereign records it at the call.

Craig Alberino · Apr 20, 2026
EU AI Act Year One: Prohibited Practices Review and What's Coming Next
AI Regulation

EU AI Act Year One: Prohibited Practices Review and What's Coming Next

The Commission's mandatory review of prohibited AI practices may expand the ban list. Here's what enterprises should monitor.

Valentina Cruz · Feb 4, 2026
The Colorado AI Act Takes Effect: First Major US State AI Compliance Deadline
AI Regulation

The Colorado AI Act Takes Effect: First Major US State AI Compliance Deadline

Colorado's comprehensive AI legislation becomes enforceable February 1. Here's what enterprises need to know about the most ambitious US state AI law.

Valentina Cruz · Jan 23, 2026
The 2026 AI Compliance Clock: What the EU AI Act's August Deadline Means for US Companies
AI Regulation

The 2026 AI Compliance Clock: What the EU AI Act's August Deadline Means for US Companies

Published January 2026. The EU has since moved Annex III high-risk obligations to December 2, 2027. What changed, and what US companies still face now.

Valentina Cruz · Jan 6, 2026
Trump's AI Executive Order: What Federal Preemption Means for Enterprise Compliance
AI Regulation

Trump's AI Executive Order: What Federal Preemption Means for Enterprise Compliance

The December 11 Executive Order aims to replace 50 state AI frameworks with one federal standard. Here's what that means operationally.

Valentina Cruz · Dec 12, 2025
The Patchwork Problem: Why 50 State AI Laws Are Worse Than One Federal Standard
AI Regulation

The Patchwork Problem: Why 50 State AI Laws Are Worse Than One Federal Standard

With 480+ state AI bills and a leaked federal preemption order, enterprises face a compliance maze with no clear exit.

Valentina Cruz · Nov 18, 2025