AI Agent Governance: Check the Sequence, Not Each Click
AI agent governance fails when you approve each click and miss the path. Five in-policy refunds can still empty the drawer. Store intent, cap the run, gate pay/send/delete.
Blog
All Articles
Strategy, psychology, engineering, and the patterns that actually compound.
178 articles • Page 3 of 20
CISA Secure by Demand: Questions for Software Vendors
CISA Secure by Demand (August 2024) is the buyer list: is MFA extra, do default passwords still exist, how do patches install, is there a public VDP. Design is the maker pledge. Demand is what you ask before you sign.
Who Owns the Site, the Host, and the Login on a Retainer
Who owns your website on a retainer is three questions: site, host, and login. U.S. copyright vests in the author unless assigned. Keep the registrar. Let an operator hold the night-shift login.
AEO for Massachusetts Local Service Businesses
AEO for Massachusetts local service businesses: identical NAP, town-true pages, 20 to 40 word FAQs. SparkToro 2024: 58.5 percent of US Google searches ended without a click. Fake city mills are a trust leak.
Why the Bing Index Still Matters for Copilot Citations
A Bing index still matters for Copilot citations. OpenAI: ChatGPT search rewrites queries and may cite partners. This domain: 13 cited URLs of 147 posts (Bing AI, 29 Aug 2026). IndexNow with a real key file. One query, one URL.
Cost Savings from Consolidating Compliance Audits
Cost savings from consolidating compliance audits with a single provider come from fewer duplicate evidence pulls. A small first SOC 2 Type 2 often lands $20,000 to $80,000 all-in. Three circuses pay the labor three times.
How a Regulated Small Business Gets Cited by ChatGPT
Getting a regulated small business cited by ChatGPT: OpenAI rewrites queries and may cite partners. Put license, town, and a 50-word answer in HTML. This domain: 13 cited URLs of 147 posts (Bing AI, 29 Aug 2026).
Managed Website and Writing Without a Ten-Person Team
Managed website and writing without a ten-person team: one retained department for site, host, and night-shift login. Brooks: more people, more paths. You keep the registrar and the data. SparkToro 2024: 58.5 percent of US Google searches had no click.
MCP Security for a Small Business: Treat Tools Like a Supply Chain
MCP security for a small business is a supply chain. Microsoft June 2026: poisoned tool descriptions can steer an agent while every click looks routine. Pin, read the description, no standing shell.