The Automat

Field notes from the bleeding edge of business

No Featured Post Selected

The Latest...

AI Incident Response: What to Do When an Agent Gets It Wrong

AI Incident Response: What to Do When an Agent Gets It Wrong

AI Incident Response: What to Do When an Agent Gets It WrongDrew Donaldson
Published on: 26/07/2026

A concrete AI incident response plan for teams running agents: how to detect, contain, communicate, and run a blameless post-mortem when an AI gets it wrong.

AI Governance, Privacy & Security
EU AI Act GPAI Obligations: What Actually Lands August 2, and What Just Slipped to 2027

EU AI Act GPAI Obligations: What Actually Lands August 2, and What Just Slipped to 2027

EU AI Act GPAI Obligations: What Actually Lands August 2, and What Just Slipped to 2027Drew Donaldson
Published on: 20/07/2026

EU AI Act GPAI obligations have been live since 2025. What actually takes effect August 2, 2026, and why the high-risk deadline moved to December 2027.

AI Governance, Privacy & Security
AI for GovCon: Selling Into the Public Sector at Commercial Speed With Compliance-World Trust

AI for GovCon: Selling Into the Public Sector at Commercial Speed With Compliance-World Trust

AI for GovCon: Selling Into the Public Sector at Commercial Speed With Compliance-World TrustDrew Donaldson
Published on: 12/07/2026

AI for government contractors without the stall: run commercial work at speed while clearing FedRAMP and CMMC trust, then climb from sub to prime.

AI Governance, Privacy & Security
Running an AI Risk Assessment That Isn't Just Theater

Running an AI Risk Assessment That Isn't Just Theater

Running an AI Risk Assessment That Isn't Just TheaterDrew Donaldson
Published on: 05/07/2026

An AI risk assessment that isn't theater: tier by stakes, score likelihood and impact honestly, size mitigations, and document the risk that remains.

AI Governance, Privacy & Security