Topic

AI Governance

29 stories on this topic, newest first.

  1. ResearchAnalysis

    Tracked AI lawsuits tripled since 2023, and 58 of 66 are still unresolved

    We analysed 66 AI lawsuits: filings rose from 8 in 2023 to 24 in 2026 so far, 88% are unresolved, and copyright's share of new suits fell from 73% to 46%.

    24 min read

  2. ToolsSurvey

    Best Claude Code skills in 2026: 11 tested and ranked for production AI teams

    The best Claude Code skills for teams shipping production AI, test-installed on 28 October 2026: governance, cost, security, MCP and observability, plus five Anthropic and Vercel picks.

    23 min read

  3. News

    Bifrost's Agent Gateway puts A2A agent calls behind virtual keys and logs

    Bifrost v2.3.0 proxies Agent2Agent traffic: register an agent by its card URL, grant it per virtual key, and trace each task to the model and tool calls it made.

    20 min read

  4. News

    Bifrost Edge moves the AI gateway from the data centre onto every laptop

    Maxim AI's Bifrost Edge is an endpoint agent that routes desktop chat apps, browser AI, coding agents and MCP servers through the company gateway, with app and MCP approvals, guardrails and MDM rollout.

    20 min read

  5. News

    Bifrost's Warp puts a plain-language analyst inside the AI gateway

    Bifrost v2.3.0 adds Warp, a dashboard assistant that answers questions about gateway logs, spend and latency, plus semantic log search, both scoped to what the person asking may see.

    21 min read

  6. ToolsExplainer

    Claude Code enterprise rollout: a phased plan with budgets, managed settings and logs

    How to roll Claude Code, Codex, Cursor and Copilot out to an engineering organisation: managed-settings.json, per-developer budgets, Bedrock residency, MCP allowlists, CI keys.

    26 min read

  7. ToolsExplainer

    Codex skills: how Agent Skills work in OpenAI Codex, and which ones to install

    Where OpenAI Codex discovers skills, how $skill and implicit invocation work, how skills differ from AGENTS.md, and how to add skills to Codex with npx skills add -a codex.

    21 min read

  8. ToolsExplainer

    OWASP LLM Top 10 (2026): every risk, the vulnerable code and the fix

    The 2026 OWASP LLM Top 10 reorders the list and renames one entry. Each risk with a vulnerable pattern, the Python or TypeScript fix, and an LLM security checklist.

    23 min read

  9. ToolsExplainer

    Claude skills marketplace: when to use public ones and when to run your own

    A Claude skills marketplace is the catalogue your agents install skills from. How public ones work, and how to run a private one with versions, review and one-step rollback.

    20 min read

  10. ToolsExplainer

    The definitive guide to Atlassian MCP: setup, auth, admin controls and limits

    Atlassian's hosted MCP server gives AI clients Jira, Confluence, Bitbucket and more at mcp.atlassian.com/v2/mcp. How to connect it, how OAuth and API tokens differ, what admins control and where it stops.

    23 min read

  11. ToolsExplainer

    Claude API keys: how to create, scope, secure and rotate them

    A Claude API key is a sk-ant secret from the Claude Console. Key types, workspaces, headers, limits, expiry, leaks, Claude Code precedence and cloud auth, as of October 2026.

    23 min read

  12. ToolsExplainer

    Claude --dangerously-skip-permissions: a practical guide to what it bypasses

    What Claude Code's --dangerously-skip-permissions flag skips, the checks that survive it, real incident patterns, and safe recipes for containers, sandboxes and CI.

    21 min read

  13. ToolsExplainer

    Claude API platform admin: roles, workspaces and the Admin API explained

    How to administer the Claude Developer Platform: Console roles, workspaces and their limits, Admin API keys and curl calls, usage and Claude Code reports, SSO and data retention.

    23 min read

  14. ToolsExplainer

    Slack MCP server: the definitive guide to tools, setup and security

    Slack's hosted MCP server lets Claude, Cursor and coding agents search, read and post in Slack as the signed-in user. Tools, scopes, setup, rate limits, risks and governance.

    24 min read

  15. IndustryExplainer

    AI governance framework: the definitive guide, from NIST and ISO to runtime

    How to build an AI governance framework in 2026: NIST, ISO/IEC 42001 and the EU AI Act after the Omnibus, a crosswalk, RACI, risk tiers, policy outlines, agent and MCP controls, metrics and a 90-day plan.

    40 min read

  16. ToolsExplainer

    Claude Skills explained: how Agent Skills work in Claude Code, apps and the API

    Claude Skills are folders of instructions and scripts that agents load on demand. How SKILL.md works, where skills run, how to write one, and skills vs MCP.

    21 min read

  17. ToolsComparison

    Codex vs Claude Code in October 2026: models, sandboxes, pricing and which to pick

    Codex vs Claude Code compared on models, sandboxing, MCP, hooks, subagents, plan limits and admin controls, with a decision guide for developers and teams.

    22 min read

  18. ToolsExplainer

    MCP security and authentication: how the OAuth flow works and where attacks land

    MCP security under the 2026-07-28 spec: how OAuth 2.1 authentication works step by step, the attacks it does not stop, and a hardening checklist for teams.

    26 min read

  19. ToolsComparison

    OpenRouter alternatives in 2026: where teams go after a hosted aggregator

    Seven OpenRouter alternatives ranked for October 2026: why teams leave a hosted aggregator, what OpenRouter still does well, and where self-hosting pays off.

    22 min read

  20. ResearchExplainer

    Prompt injection attacks: real examples, why they work and the defences that hold

    Prompt injection examples from documented incidents, why no model has solved it, and the layered defences that cap the damage when an AI agent is fooled.

    25 min read

  21. IndustryComparison

    Top AI governance tools in 2026: nine platforms, two different jobs

    Nine AI governance tools ranked for October 2026, split into runtime enforcement that controls AI traffic and GRC platforms that inventory and document it.

    22 min read

  22. ToolsComparison

    Top 10 AI guardrails tools in 2026, ranked by where they enforce

    AI guardrails compared for October 2026: gateway, in-app library, classifier model or cloud API. Ten LLM guardrails tools ranked on checks, latency and cost.

    25 min read

  23. ToolsComparison

    Top 5 AI gateways for air-gapped and in-VPC LLM deployments in 2026

    Five self-hosted gateways compared for on premise LLM stacks: offline installs, outbound defaults, private model endpoints, secret stores and audit evidence.

    18 min read

  24. ToolsComparison

    Top 5 AI gateways for Claude Code, Codex CLI and Cursor in 2026

    Five AI gateways ranked as a Claude Code proxy and Codex or Cursor endpoint, on per-developer keys, budgets, model swapping, MCP tools and loop limits.

    22 min read

  25. ToolsComparison

    Top 10 AI gateways in 2026, ranked for production use

    Bifrost, LiteLLM, Kong, Azure API Management, Agent Router, Vercel, Cloudflare, Databricks, OpenRouter and APISIX ranked on overhead, failover, governance, guardrails, MCP and deployment.

    19 min read

  26. IndustryComparison

    Top 10 managed agent orchestration platforms for enterprises in 2026

    AgentCore, Foundry, Google's Agent Platform, LangSmith, Agentforce, ServiceNow and four more ranked on runtime, identity, memory, MCP and A2A, lock-in, audit, pricing and data residency.

    24 min read

  27. ToolsComparison

    Top 10 MCP servers for coding agents in 2026, ranked on what they cost and what they risk

    GitHub, Context7, Playwright, Chrome DevTools, Sentry and five more MCP servers ranked for Claude Code, Cursor, Codex and Copilot, with measured tool-definition token costs and injection risks.

    24 min read

  28. ToolsComparison

    Top 10 open-source MCP gateways you can self-host in 2026

    Ten MCP gateways you can run on your own infrastructure, ranked on what the free tier actually includes: OAuth, per-tool access control, audit, guardrails, deployment and community health.

    22 min read

  29. IndustryAnalysis

    Shadow AI: why blocking fails and what actually governs it

    Shadow AI now reaches desktop apps, coding agents and local MCP servers that network blocks never see. What the breach data shows, what regulators expect, and the control model that works.

    18 min read