The operating model for the capability era
the models are improving faster than most enterprises are improving their control systems. The real gap is operational control, and the answer is better systems around the models.
Read field note →Topic archive
enterprise-ai
AI spend is becoming an operational risk category
AI cost is no longer just a procurement conversation. If agent usage grows faster than your visibility into spend and business value, you do not have control. You have drift.
Read field note →The attack surface is now the trust surface
if you can poison the logs an agent reads, you can influence what it does. The attack surface is now the trust surface, which makes data trust, observability, and identity security the same conversation.
Read field note →Autonomous by default is a governance decision
when autonomous mode becomes the default, that is not just a product feature. It is a governance decision about identity, permissions, approvals, and observability.
Read field note →Better model. Bigger control problem.
the models are getting better, but that is no longer the interesting problem. Capability is scaling faster than control, and that gap is where enterprise teams get hurt.
Read field note →The identity-first operating model for AI
trusted AI needs trusted identities, trusted controls, and trusted recovery paths. Visibility, least privilege, monitoring, governance, and resilience all matter.
Read field note →The market is building identity-first AI controls
the market is converging on the same point — identity is becoming the control plane for AI.
Read field note →The supply chain is now an identity problem
exposed packages, datasets, pipelines, and secrets all converge on the same lesson — the supply chain is now an identity problem.
Read field note →Most AI incidents are really identity incidents
many so-called AI safety stories are really identity and access stories. Once systems can act, the access chain becomes the strategy.
Read field note →