The Automat

Field notes from the bleeding edge of business

No Featured Post Selected

The Latest...

Who's Liable When Your AI Agent Makes a Bad Call?

Who's Liable When Your AI Agent Makes a Bad Call?

Who's Liable When Your AI Agent Makes a Bad Call?Drew Donaldson
Published on: 11/08/2026

AI liability rarely lands on the vendor or the model. Where the fallout falls, what contracts can and can't shift, and how to build a defensible record.

AI Governance, Privacy & SecurityAI liability2026AI operatorsAI agent accountability
Shadow AI Is Already in Your Company. Here's How to Govern It

Shadow AI Is Already in Your Company. Here's How to Govern It

Shadow AI Is Already in Your Company. Here's How to Govern ItDrew Donaldson
Published on: 03/08/2026

Shadow AI governance without the bans: surface unsanctioned AI use, move teams onto sanctioned tools, and set guardrails that protect company data.

AI Governance, Privacy & Securityshadow AI governance2026SMB & mid-market IT leadersacceptable use policy
AI Incident Response: What to Do When an Agent Gets It Wrong

AI Incident Response: What to Do When an Agent Gets It Wrong

AI Incident Response: What to Do When an Agent Gets It WrongDrew Donaldson
Published on: 26/07/2026

A concrete AI incident response plan for teams running agents: how to detect, contain, communicate, and run a blameless post-mortem when an AI gets it wrong.

AI Governance, Privacy & SecurityAI incident response plan2026AI for consultants and growth-stage teamsAI kill switch
EU AI Act GPAI Obligations: What Actually Lands August 2, and What Just Slipped to 2027

EU AI Act GPAI Obligations: What Actually Lands August 2, and What Just Slipped to 2027

EU AI Act GPAI Obligations: What Actually Lands August 2, and What Just Slipped to 2027Drew Donaldson
Published on: 20/07/2026

EU AI Act GPAI obligations have been live since 2025. What actually takes effect August 2, 2026, and why the high-risk deadline moved to December 2027.

EU AI ActGPAIAI governanceAI complianceArticle 50AI regulation