compliance

Gate has added a direct US stock trading feature in its TradFi section through partnerships with US stock brokers, distinct from previous security tokens, achieving compliant direct investment in US stocks.

NVIDIA introduces the MCG Toolkit, an automated pipeline that generates compliant model documentation (Model Card++ format) from source code in under a minute, leveraging RAG and NIM microservices.

Sentinel v0.3.0 is released, an out-of-band AI Agent security framework featuring Shield Sidecar, deterministic shadow sandbox, Red Team Engine with 34 vectors, and EU AI Act compliance reports.

Illinois lawmakers passed SB 315, the strongest AI safety bill in the US, requiring frontier AI labs like OpenAI, Anthropic, and Google to have third-party audits of their safety practices. Governor JB Pritzker has said he will sign it, making Illinois a leader in AI regulation.

ControlBot is an open-source tool that reviews Terraform PRs for NIST 800-53 compliance using Checkov and Cursor SDK, providing inline comments and merge gates.

Wiz announces an integration with Anthropic's Compliance API, bringing visibility into Claude Enterprise usage, permissions, projects, and datasets into the Wiz Security Graph for security and compliance teams.

A discussion about designing AI agent systems in heavily regulated environments, focusing on the challenge of false positives and how to present model confidence to users without adding cognitive load.

The 2026 HIPAA Security Rule update introduces mandatory encryption, multi-factor authentication, 72-hour incident reporting, and annual penetration testing. Healthcare organizations must begin preparations to meet these significant new requirements.

This paper introduces Ontological Knowledge Blocks (OKBs), a programmable governance infrastructure that compiles regulatory obligations into machine-checkable constraints for trustworthy AI systems, with prototype evaluation in HPC resource allocation.

This paper provides a comprehensive compliance architecture for AI providers under EU law, focusing on agentic AI regulation. It is recommended by the AI Ethics Paper Club for developers and deployers navigating EU compliance.

A firsthand perspective from an enterprise R&D manager on the realities of AI adoption in large companies, highlighting gaps between executive expectations and actual productivity improvements, and the challenges of getting teams to use AI tools effectively.

Built a public audit-trail receipt URL for MCP-callable agents, shipped as Apache 2.0 OSS, to address procurement objections by providing consumer-readable audit receipts with supervision checks.

This Reddit poll asks whether organizations are prepared for AI systems that can execute financial or business transactions without requiring human confirmation, highlighting the governance and compliance challenges ahead.

The author shares their experience building an autonomous AI research agent for pre-meeting paraplanning tasks using Claude Opus 4, but faces challenges extending it to post-meeting document generation due to compliance and template issues. They seek advice on whether the two phases should remain separate and how to bridge them in regulated environments.

A tweet from @rwayne reports that a relay station (中转站) now has a 100% compliant solution, breaking the 'impossible triangle' in AI API services.

This paper presents CUGA's policy system, a modular policy-as-code layer that enforces governance at multiple checkpoints in LLM agent execution, enabling predictable and auditable behavior without model fine-tuning.

NVIDIA FLARE's latest version enables federated learning without requiring refactoring of existing training scripts, using a client API and job recipes for seamless deployment across simulation and production environments.

A free AI risk calculator that uses Fermi estimation with honest confidence intervals to estimate AI risk exposure in minutes, broken into five categories with a downloadable PDF.

A developer shares how AI agents are improving tokenization platforms through intelligent orchestration of humans and systems, rather than full autonomy.

Hiro is an agentic security team that assists from the first commit through to SOC 2 compliance.