Governance Insights

The Dictiva Blog

Insights on policy operations, attestation, governance education, and AI-agent oversight from the team building Dictiva.

Showing 1-24 of 146 articles

Page 1 of 7

NewsOct 22, 20263 min read

Pipeline Repair Agents Need a Clear Standard for Review

Snowflake reports under 16 minutes on average from failure detection to a repair PR. Teams still need to define what makes a proposed change acceptable.

data-engineeringdata-pipelinesai-agents
C
Carlos Alvidrez
NewsOct 20, 20263 min read

A Model Needs a Business Mandate Before It Needs a Build

Before building a model, establish whether the accountable function requested the work and helped define the problem. Technology partnership starts with service.

analytics-valuedecision-sciencedata-science
C
Carlos Alvidrez
NewsOct 13, 20263 min read

A Path to Training Data Records a Location, Not What the Model Saw

A path locates training data. Preserving what a model saw takes a verifiable reference, backed by policy, standard, procedure and verification.

model-riskdata-versioningresponsible-ai
C
Carlos Alvidrez
NewsOct 12, 20263 min read

A Data Operating Model Must Include the People Who Own the Process

A data initiative that promises lasting improvements needs people with authority to change the underlying processes, and a scope that reflects their commitments.

data-managementoperating-modelprocess-ownership
C
Carlos Alvidrez
NewsOct 6, 20263 min read

A Data Team's Brand Needs Clear Commitments Behind It

Dylan Anderson's interviews raise a question about data teams' reputations: how should they report results when expectations are unclear or keep changing?

data-leadershipdata-governancedata-management
C
Carlos Alvidrez
NewsSep 29, 20264 min read

The Data Platform Cannot Decide Who Owns the Definition

A platform can implement a data definition. Deciding which definition fits the business still requires someone with authority over the process behind it.

data-governancesemantic-layerdata-strategy
C
Carlos Alvidrez
NewsSep 24, 20263 min read

Your Pipeline Sprawl Is a Missing Agreement, Not a Missing Platform

Moeve cut dbt onboarding from days to about 15 minutes. The architecture diagram gets the credit. The real fix was a contract every team agreed to run under.

data-managementdata-engineeringdata-governance
C
Carlos Alvidrez
NewsSep 22, 20264 min read

Every Report Was Accurate. Every Number Was Wrong.

Parkview went from five pharmacies to sixteen in two years. Every system reported correctly about itself, and the company still could not count its own patients.

data-managementdata-governancemetric-definitions
C
Carlos Alvidrez
NewsSep 17, 20265 min read

Four Data Brokers, One Cause of Death: Nobody Owned January 31

California keeps fining data brokers for registering late, at $200 a day. The companies change; the cause of death does not. Nobody owns the question of what the business has become.

data-privacydelete-actdata-brokers
C
Carlos Alvidrez
NewsSep 16, 20264 min read

You Don't Have to Run the Company. Drafting the Agenda Is Enough.

OFAC fined a US consultant $1.4M for nineteen video calls advising an Iranian company. They never ran it; they drafted the agenda. Your recommending agents are on the same call.

sanctionsofacaccountability
C
Carlos Alvidrez
NewsSep 10, 20264 min read

A Reform Is a Maintenance Commitment, Not a Press Release

A reform gets announced, celebrated, and a year later the service still fails and business still pays. The missing piece is an owner for month twelve.

data governanceaccountabilityreform delivery
C
Carlos Alvidrez
NewsSep 9, 20263 min read

Anthropic's Safety Pledge Was a Favor, Not a Control

Anthropic barred the UK's safety institute from its newest model. The lesson: a commitment one party can revoke alone was never governance.

AI governanceAI safetyAnthropic
C
Carlos Alvidrez
NewsSep 3, 20263 min read

BAE's Controls Never Fired Where the Export Happened

BAE's $36M ITAR penalty shows what happens when controls live in a policy binder, not at the point of export. And BIS just made that gap expensive.

export controlsITAR complianceregulatory enforcement
C
Carlos Alvidrez
NewsSep 1, 20264 min read

Most Compliance Programs Die of Assurance, Not Bad Design

The DOJ's new fraud memo spells out where enforcement is headed. The real lesson: controls that live as documents die the moment they're tested.

compliance programsDOJ enforcementinternal controls
C
Carlos Alvidrez
ArticleAug 27, 20268 min read

The Model Was Never the Variable

Across three benchmarks, changing the context supplied to a frontier model moved accuracy by 17 to 38 points. Changing the model produced swings statistically indistinguishable from zero. The half of your AI system that decides whether it tells the truth is the half nobody owns, versions, or signs for.

ai-governancecontext-qualitysemantic-layer
C
Carlos Alvidrez
NewsAug 26, 20264 min read

Hiring a Red Team Isn't Assurance. Owning the Verdict Is.

A vendor red-teamed OpenAI, Anthropic and Meta, and it went off the rails. Third-party AI testing isn't a control until someone owns the verdict.

AI governancethird-party riskAI safety
C
Carlos Alvidrez
NewsAug 25, 20263 min read

Anyone Can Build a Gate. Almost No One Can Close One.

China's gate for frontier AI is already built. That was the easy part. A release gate is only governance if someone owns the authority to halt a launch.

AI governancefrontier AIrelease gates
C
Carlos Alvidrez
NewsAug 20, 20264 min read

A Self-Certification Nobody Rejects Is Just a Rubber Stamp

Self-certification only governs if the regulator can say no. When filings flood in and silence means yes, the binding commitment quietly flips into a rubber stamp.

self-certificationregulatory enforcementattestation controls
C
Carlos Alvidrez
NewsAug 18, 20265 min read

Nobody Owns the 20-Year FTC Decree Your Company Signed

An FTC settlement doesn't end the case. It starts a 20-year obligation most firms sign without naming who inside actually owns it.

FTC consent decreeregulatory compliancegovernance ownership
C
Carlos Alvidrez
NewsAug 14, 20267 min read

The Claim Is Cheap Now. Substantiation Is the Control.

A true "Made in USA" claim can still be illegal without proof. See why substantiation, not honesty, is becoming governance's core control.

substantiationAI governancedata provenance
C
Carlos Alvidrez
NewsAug 8, 20267 min read

Your Scariest AI Incident Was a Configuration Error

OpenAI's model 'escaped' its sandbox, but the root cause was a misconfiguration. Why AI's scariest incidents trace back to old governance failures.

AI governancecybersecurityrisk management
C
Carlos Alvidrez
NewsAug 6, 20267 min read

The Definition Is the Control Nobody Thought to Govern

A narrowed word in the Endangered Species Act, a new CLO methodology, a defense audit mandate: why definitions are governance's quietest control.

policy governanceregulatory changerisk management
C
Carlos Alvidrez
NewsAug 4, 20267 min read

Nobody Voted to Make ChatGPT Government Infrastructure

Congress drafts laws with ChatGPT, and no one approved it. When adoption outruns the procurement gate, governance must go to the point of use.

AI governanceshadow AIvendor risk management
C
Carlos Alvidrez
NewsJul 30, 20267 min read

AI Stopped Asking Permission. Your Controls Didn't Notice.

A breach, a productivity tool, and a factory pitch share one capability: autonomous AI action. Here's why your checkpoint controls no longer fire.

agentic AIAI governanceaccess controls
C
Carlos Alvidrez
Subscribe via RSS