by Gary Zimmerman | Oct 26, 2026 | AI, Governance, Identity
Two weeks ago we talked about proving who authorized an agent’s action – If Your Logs Can’t Tell a Person From an Agent, You Don’t Have Proof. Last week was about keeping that authority narrow as work moves from one agent to the next –...
by Gary Zimmerman | Oct 19, 2026 | AI, Cybersecurity, Governance, Identity
Last week I asked a simple question: for the last thing an agent did, how long would it take you to name who authorized it – If Your Logs Can’t Tell a Person From an Agent, You Don’t Have Proof? This week I want to make that question harder. Because...
by Gary Zimmerman | Oct 12, 2026 | AI, Cybersecurity, Governance, Identity
Last week I asked where your AI policy actually fires LINK: Your AI Policy Isn’t a Control Until It Fires. This week I want to ask what happens after it fires. Can you prove it did? Here’s the scenario I keep coming back to. An agent in your environment...
by Gary Zimmerman | Oct 5, 2026 | AI, Governance, Identity
Last week I asked which way your guardrails fail when they stop working Which Way Does Your Guardrail Fail?. This week I want to back up a step and ask something more basic. Is your AI policy connected to anything at all? That sounds like a rhetorical question. It...
Recent Comments