AI

Agentic AI shifts software delivery from applications to automated workflows. The business process and the code become the same thing — which means governance needs to shift too.

MCP servers let AI agents access your APIs without custom code. Most weren't built for production security. That gap between "works in demo" and "safe at scale" is where the liability lives.

Legal AI vendors should publish what they refuse to build, not just what they ship. Architectural constraints aren't limitations — they're competitive differentiators. The first privilege breach will prove who got this right.

When long-running AI agents summarize their own context to stay within token limits, they're deciding what to forget. That's not an engineering problem — it's a governance one.

Better context beats a better model — which means AI risk governance needs to shift from the model layer to the retrieval layer. That's where defensibility lives now.

LLMs break traditional observability — and that creates a compliance gap most governance teams haven't addressed yet. If you can't trace the full AI pipeline, you can't audit it.

You wouldn't tell a first-year associate "do law" and expect good results. So why are attorneys doing exactly that with AI agents? Dan…

The trajectory is encouraging — the most capable models performed best. But 20 percent is not a foundation for compliance frameworks.