Skip to main content

Compliance

Meeting regulatory requirements and industry standards for AI systems

AI Governance
AI Security
Data Privacy
AI Ethics
Compliance
Risk Management
AI Safety
Responsible AI

All Posts

View AI Agent Identity: The Complete Enterprise Guide
Featured image for AI Agent Identity: The Complete Enterprise Guide

AI Agent Identity: The Complete Enterprise Guide

Adesh Gairola

AI agent identity answers who this is and whether it's allowed in. It does not answer whether what it did was okay. This guide covers what agent identity is, why traditional IAM breaks for agents, the delegation-versus-impersonation decision, the four-layer identity model, seven identity mechanisms compared by the audit log line each one leaves behind, how identity failed in the ServiceNow BodySnatcher case, and what identity cannot solve on its own.

View AI Agent Accountability: Who's Responsible When It Acts?
Featured image for AI Agent Accountability: Who's Responsible When It Acts?

AI Agent Accountability: Who's Responsible When It Acts?

Adesh Gairola

Four parties can be accountable when an AI agent takes the wrong action: the deploying organisation, the permission grantor, the agent vendor, and the model provider. Which one it lands on is decided by evidence, not by contract language, and the single field most logs are missing, an actor distinct from the human whose credential the agent borrowed, is enough to collapse every one of those claims at once.

View NPC Nation: what Australia's new AI framework actually covers
Featured image for NPC Nation: what Australia's new AI framework actually covers

NPC Nation: what Australia's new AI framework actually covers

Adesh Gairola

The 15 July framework binds data centres: where they sit, what power and water they draw, what they pay for the grid, plus training on Australian creative work. It puts no new obligation on anyone building with models. What already binds you is the law you have: consumer law, APRA, ASIC, the Privacy Act. Neither document says who gets to say no.

View Four Layers of AI Agent Identity: The Model I Use
Featured image for Four Layers of AI Agent Identity: The Model I Use

Four Layers of AI Agent Identity: The Model I Use

Adesh Gairola

Agent identity makes more sense as four stacked layers: a tamper-proof token format, cryptographic proof of which workload is running, a delegation chain that keeps the human as the subject, and a way to onboard to a service an agent has never met. Climb all four and you've proven who the agent is. You still haven't proven that what it did was okay.