Notes on governing AI in production
What we learn building the control layer: regulation with dates attached, redaction that has to survive a review, and the parts of agent governance nobody enjoys.
Every protection Obstruo offers has a price. Here is the whole list, measured on live production traffic, at the median and at the tail.
Read the articleTransparency stops being guidance and becomes an obligation. Here is what changes, and why it is a request-path problem rather than a product-copy problem.
Read the articleEvery gateway writes logs. Almost none of them answer the question an auditor asks eleven months later.
Read the articleA support message from Munich and the same message from California are not the same compliance object. Redaction has to know the difference.
Read the articleModel access is a data question. Tool access is an action question, and it is the one that will wake your on-call.
Read the articleProvider keys spread the way secrets always spread. The migration off them is smaller than teams expect.
Read the article