Which rules, classifications, standards, and decision rights change what organisations must do?
An Arizona appeals court found that an AI victim video made sentencing fundamentally unfair despite explanation of its origin. Consequential-media controls need a hard boundary, not disclosure alone.
Google says most of a surge in automated open-source vulnerability reports was invalid. Security teams should meter evidence cost before treating submission volume as researcher productivity.
Labs are hiring economists and funding outside researchers because they hold unusually rich usage data. Independence depends less on job titles than on who can ask questions, inspect transformations, publish null results and challenge the dataset.
A European Commission systematic review finds the strongest evidence for learning outcomes, with more mixed motivation evidence and little socio-emotional evidence. Procurement should therefore test the local learning mechanism, not import an average effect.
NIST’s draft guide shows three useful CSF 2.0 workflows and repeatedly requires qualified review. Teams should preserve the source-to-output trail before using any generated profile in a risk decision.
China’s 2030 AI-literacy plan spans schools, universities, vocational education and adult learning. Implementation should separate access, teaching quality and demonstrated stage-appropriate capability.
The AI cybersecurity standard is entering publication. Teams can use its threat catalogue now, but should record the risks and actors it does not cover before calling the result complete.
Trillium Labs promises data, code, evaluations, checkpoints and failed runs from post-training experiments. Research buyers should convert that promise into a reproducibility and risk-release checklist.
Apple says future macOS releases will add controls when AI agents request Full Disk Access. Security teams should convert broad, durable consent into bounded task grants with expiry and review.
