Épisodes

  • Who Is Allowed, Who Is Liable: Agent Accountability Gets Specific | 10.21.26

    Who Is Allowed, Who Is Liable: Agent Accountability Gets Specific | 10.21.26
    Oct 21 2026
    The American Medical Association has published a governance framework for clinical AI agents built on four questions: what the agent does, what proves it can, what it may do and under what conditions, and who bears responsibility. In the Senate, Hawley and Murphy have introduced a bipartisan bill that would attach criminal and civil liability to operators of agents that recklessly cause hacking damage. A March paper from Kaptein and colleagues argues that the execution path, not the prompt, is the proper object of runtime governance. Illinois has created a standing AI Cabinet to study risk to critical infrastructure, and a new demo paper shows policy-as-code checkpoints inside a generalist enterprise agent. Full briefing: https://blog.bearcanyonhq.com/post/who-is-allowed-who-is-liable-agent-accountability-gets-specific-10-21-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    9 min
  • Authority Before Capability: Governing What Agents Are Allowed to Do | 10.20.26

    Authority Before Capability: Governing What Agents Are Allowed to Do | 10.20.26
    Oct 20 2026
    Governance of autonomous agents is converging on a single question: not what a system can do, but what it was permitted to do and who can prove it. Brookings argues that agents behave like delegated decisionmakers and must be governed continuously at runtime, while a June preprint places independent attestation at the point of consequential action. A second paper cautions that logs and hashes prove less than practitioners assume, and AI Frontiers makes the case for agent identity that traces to a legal person. In Massachusetts, a Senate proposal points toward mandatory independent evaluation of AI models. Full briefing: https://blog.bearcanyonhq.com/post/authority-before-capability-governing-what-agents-are-allowed-to-do-10-20-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    9 min
  • Authority Without Inference, Accountability Without Blame | 10.19.26

    Authority Without Inference, Accountability Without Blame | 10.19.26
    Oct 19 2026
    Two new papers make the same architectural argument from different directions: an agent's inference should never itself confer authority to act, and the control that decides must sit outside the thing being controlled. Atlassian's CEO arrives at a similar place from the boardroom, insisting that every agent edit be attributable to a named human. Meanwhile, an analysis of one week's activity across five jurisdictions finds agent liability being defined by subpoenas, rulemakings and advisories rather than statute, and China has proposed treating overseas deployment of its models and agents as an export. Full briefing: https://blog.bearcanyonhq.com/post/authority-without-inference-accountability-without-blame-10-19-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    8 min
  • Governance Outside the Loop: Runtime Control, Action Receipts and Named Owners | 10.16.26

    Governance Outside the Loop: Runtime Control, Action Receipts and Named Owners | 10.16.26
    Oct 16 2026
    Two new papers argue for the same architectural move from different directions: pull governance out of the agent loop and enforce it in a separate runtime layer, with a portable certificate proving what was authorized. A SecurityHQ and Datadog survey shows why it matters, with 76% of organizations naming an accountable owner but only 49% able to reconstruct what their agents did last month. In Brussels, the Commission is probing loss-of-control incidents while insisting the AI Act is up to the task, and a Glasgow policy post reminds us that agentic accountability is structural, not personal. Full briefing: https://blog.bearcanyonhq.com/post/governance-outside-the-loop-runtime-control-action-receipts-and-named-owners-10-16-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    8 min
  • Accountability Moves Into the Runtime | 10.15.26

    Accountability Moves Into the Runtime | 10.15.26
    Oct 15 2026
    Regulators and researchers are converging on the same point: when agents act with less human supervision, accountability has to live in the runtime. New academic work finds that public agent systems record plenty about what agents did but rarely show who can stop them or independently check them. The UK is reportedly weighing mandatory incident reporting for frontier AI, US state bank examiners now have a playbook that explicitly covers agentic systems, and enterprise leaders are saying governance must follow agents into production. Full briefing: https://blog.bearcanyonhq.com/post/accountability-moves-into-the-runtime-10-15-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    7 min
  • Autonomy Is Not an Alibi | 10.14.26

    Autonomy Is Not an Alibi | 10.14.26
    Oct 14 2026
    The UK's data protection regulator told AI developers that an agent's autonomy is no excuse for poor compliance, and opened a call for evidence on agentic systems. A new arXiv framework proposes three independent authorities that must agree before an agent acts, with cryptographic receipts an outside auditor can replay. CIO.com argues the enterprise gap is ownership, not tooling, and a House discussion draft would make developers liable when their systems injure third parties. The common thread: accountability is moving from policy language to evidence. Full briefing: https://blog.bearcanyonhq.com/post/autonomy-is-not-an-alibi-10-14-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    8 min
  • Who Audits the Auditors? Independence Becomes the Governance Test | 10.13.26

    Who Audits the Auditors? Independence Becomes the Governance Test | 10.13.26
    Oct 13 2026
    Three pieces of research and analysis converge on the same pressure point today: independence. A new audit protocol argues that auditors of agentic AI should be graded on who controls them, what they run on, and how their evidence is attested, while Brookings says the White House's voluntary superintelligence accord fails because the companies bound by the controls also design them. In Washington and Canberra, meanwhile, lawmakers are moving the accountability question out of voluntary guidance and toward statute and mandatory standards. Full briefing: https://blog.bearcanyonhq.com/post/who-audits-the-auditors-independence-becomes-the-governance-test-10-13-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    9 min
  • Who Holds the Record? Auditability Moves to the Architecture | 10.12.26

    Who Holds the Record? Auditability Moves to the Architecture | 10.12.26
    Oct 12 2026
    Today's briefing is about evidence. Three technical proposals, an academic paper on agent auditability, a runtime policy framework that evaluates execution paths, and an IETF draft that separates the auditor from the governed, converge on the same idea: accountability has to be designed into the system rather than reconstructed afterward. A small field test of three commercial agents shows how uneven approval and disclosure still are, and Brookings argues the White House accord leaves companies grading their own work. Australia's consultation on frontier AI training conditions rounds out a policy picture that is moving, but slowly. Full briefing: https://blog.bearcanyonhq.com/post/who-holds-the-record-auditability-moves-to-the-architecture-10-12-26 Produced in the Bear Canyon Systems Lab. Editorial content — real research, real opinions. Check the sourcing on the blog.
    Afficher plus Afficher moins
    10 min