Loading…
Topic
2 posts about Auditability. Every summary links to the original.
See the idea
BYOK lets a system run on assets you supply — your model credential or your private knowledge — instead of the vendor's defaults. This walkthrough traces six steps from registration to an audited response.
APRA's April 2026 letter flags single-provider concentration as a CPS 230 risk, so AI stacks need a rehearsed substitution path. This flow maps five stages, from workload classification to provider swap.
A side-by-side comparison of the two accountability models engineers actually rely on: a named human owner per outcome, and system-enforced traces, budgets, and isolation.
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
Newest first
Point-in-time authentication treats an initial password, MFA, or passkey check as sufficient trust for the rest of a session, leaving post-login account takeovers, session hijacking, and risky API actions insufficiently evaluated. The proposed model replaces this front-door assumption with continuous context evaluation using passive telemetry such as network, telecommunications, device, behavioral, and transaction signals, then intervenes when risk scores or policy thresholds rise. For AI agents, delegated authority sets temporal, monetary, and API limits through short-lived credentials, while Know Your Agent lineage links execution to the authorizing human and deploying enterprise. High-impact actions can trigger human checkpoints through SMS, push, or voice channels, while immutable logs, transparent scoring, tenant isolation, and session lineage support auditability and compliance. The resulting architecture aims to keep low-risk autonomous work unobtrusive while making sensitive operations controllable and provable.
Spain’s proposed customer service law would impose stricter requirements on regulated providers and sufficiently large companies, covering response times, human access, complaint handling, accessibility, and auditability. It would require 95% of support calls to be answered within three minutes, free lines, 24/7 support for continuity issues in essential services, and complaints resolved within 15 days or five days for undue charges. The source also describes protections against spam calls, centralized complaint records, multilingual support obligations for some large companies, and simpler subscription cancellation. It presents AI Agents such as Fin as a way to reduce avoidable volume, answer calls, preserve human escalation, structure complaints, communicate outages, and support reporting. The stated conclusion is that early modernization may ease pressure on human teams while helping organizations adapt to rising regulatory and customer expectations.
The best engineering reads, once a week.
