Skip to main content

Weekly newsletter

AI accountability after the demo is over

Every Tuesday, a short field note on what was approved, who owns the decision, and what evidence survives after deployment.

The Governance Gap
Reset

August 18, 2026

The Governance GapGovernanceAgentsSecurity
Latest

When Microsoft Provisioning Quietly Changes Who Owns Security Copilot

Under the inclusion model for Microsoft 365 E5 and E7, eligible tenants are automatically provisioned for Security Copilot, and a documented set of existing Entra, Purview, and Intune roles inherits owner or contributor access. The entitlement exists. The approval record does not.

Read issue 23 →

August 11, 2026

The Governance GapGovernanceAgents

The Agent Was Authorized. The Schedule Never Was.

Routines in Foundry Agent Service let an agent run automatically on a timer, a schedule, or an external event. The routine record holds the trigger, the action, and the run history, and none of the three records who decided the run should exist or when anyone will ask whether it still should.

Read issue 22 →

August 4, 2026

The Governance GapGovernanceAgents

Your Chatbot Became a Compliance Test on Saturday.

The Digital Omnibus deferred the AI Act's high-risk chapter to December 2027, but the Article 50 transparency obligations applied on schedule from August 2, 2026. Any customer, competitor, or national authority can test whether your chatbot discloses what it is, which is why enforcement starts with the checks that cost nothing to run.

Read issue 21 →