https://mickai.co.uk/articles/dora-audit-phase-what-banks-must-prove-about-their-ai-vendors Mickai en 2026-07-08 DORA Is in Its Audit Phase: What Banks Must Now Prove About Their AI Vendors dora, operational-resilience, sovereign-ai, banking-compliance, third-party-risk, on-premise https://mickai.co.uk/articles/your-ai-vendor-is-now-a-critical-third-party-dora-concentration-risk Mickai en 2026-07-08 Your AI Vendor Is Now a Critical Third Party: DORA, Concentration Risk and Owning the Model dora, concentration risk, sovereign ai, third-party risk, compliance, operational resilience https://mickai.co.uk/articles/shadow-ai-is-the-leak-you-cannot-see Mickai en 2026-07-08 Shadow AI Is the Leak You Cannot See shadow ai, data governance, sovereign ai, compliance, insider risk, zero egress https://mickai.co.uk/articles/prompt-injection-owasp-number-one-defending-ai-that-cannot-phone-home Mickai en 2026-07-08 Prompt Injection Is the Number One AI Threat: Defending a System That Cannot Phone Home prompt injection, ai security, zero egress, sovereign ai, owasp, eu ai act https://mickai.co.uk/articles/eu-ai-act-article-15-proving-resilience-to-manipulation Mickai en 2026-07-08 EU AI Act Article 15: Proving Resilience to Manipulation, Not Just Claiming It eu ai act, article 15, adversarial testing, audit chain, sovereign ai, high-risk systems https://mickai.co.uk/articles/credit-scoring-is-high-risk-by-default-sovereign-ai-for-lending Mickai en 2026-07-08 Credit Scoring Is High-Risk by Default: Sovereign AI for Lending Under Annex III eu ai act, credit scoring, high-risk ai, sovereign ai, annex iii, financial compliance https://mickai.co.uk/articles/sovereign-ai-for-central-banks-monetary-data-off-the-cloud Mickai en 2026-07-08 Sovereign AI for Central Banks: Monetary Data That Cannot Touch a Public Cloud sovereign ai, central banks, on-premise inference, monetary policy, data residency, ai governance https://mickai.co.uk/articles/ai-in-the-courtroom-sovereign-intelligence-for-the-justice-system Mickai en 2026-07-08 AI in the Courtroom: Sovereign Intelligence for the Justice System sovereign ai, justice, evidence integrity, eu ai act, audit, chain of custody https://mickai.co.uk/articles/clinical-trials-on-a-sealed-substrate-pharma-ai-without-moving-patient-data Mickai en 2026-07-08 Clinical Trials on a Sealed Substrate: Pharma AI Without Moving Patient Data clinical trials, sovereign ai, data residency, pharmaceutical, audit trail, eu ai act https://mickai.co.uk/articles/energy-and-water-as-cni-ai-that-cannot-be-someone-elses-dependency Mickai en 2026-07-08 Energy and Water as Critical Infrastructure: AI That Cannot Be Someone Else's Dependency critical infrastructure, sovereign ai, nis2, air-gapped, energy, water https://mickai.co.uk/articles/the-insider-threat-at-the-provider-trust-us-is-not-a-security-model Mickai en 2026-07-08 The Insider Threat at the Provider: Trust Us Is Not a Security Model insider threat, sovereign ai, on-premise, eu ai act, cloud security, zero egress https://mickai.co.uk/articles/model-poisoning-and-the-sealed-corpus-training-on-data-you-can-vouch-for Mickai en 2026-07-08 Model Poisoning and the Sealed Corpus: Training on Data You Can Vouch For model poisoning, sovereign ai, supply chain security, data provenance, sealed corpus, sios https://mickai.co.uk/articles/a-bill-of-materials-for-your-ai-model-provenance-and-the-supply-chain Mickai en 2026-07-08 A Bill of Materials for Your AI: Model Provenance and the Supply Chain provenance, supply-chain, ai-governance, sovereign-ai, compliance, auditability https://mickai.co.uk/articles/write-once-prove-forever-worm-storage-for-ai-decisions Mickai en 2026-07-08 Write Once, Prove Forever: WORM Storage for AI Decisions worm-storage, audit-trail, post-quantum, ai-governance, compliance, sovereign-ai https://mickai.co.uk/articles/voice-as-a-key-biometric-gating-for-consequential-ai-actions Mickai en 2026-07-08 Voice as a Key: Biometric Gating for Consequential AI Actions voice biometrics, ai governance, sovereign ai, access control, eu ai act, audit https://mickai.co.uk/articles/federated-by-default-intelligence-without-moving-the-data Mickai en 2026-07-08 Federated by Default: Intelligence Without Moving the Data federated-intelligence, data-sovereignty, sios, zero-egress, eu-ai-act, post-quantum-audit https://mickai.co.uk/articles/the-cloud-act-problem-an-eu-region-is-not-the-same-as-out-of-reach Mickai en 2026-07-08 The CLOUD Act Problem: An EU Region Is Not the Same as Out of Reach data sovereignty, cloud act, jurisdiction, gdpr, sovereign ai, compliance https://mickai.co.uk/articles/insurance-pricing-under-the-microscope-annex-iii-fairness-and-audit Mickai en 2026-07-08 Insurance Pricing Under the Microscope: Annex III, Fairness and the Audit Trail eu ai act, insurance, annex iii, audit trail, sovereign ai, governance https://mickai.co.uk/articles/tax-authorities-and-the-duty-of-care-sovereign-ai-for-public-revenue Mickai en 2026-07-08 Tax Authorities and the Duty of Care: Sovereign AI for Public Revenue sovereign ai, public sector, eu ai act, tax administration, data protection, auditability https://mickai.co.uk/articles/the-88-percent-ai-agent-security-incidents-are-now-the-norm Mickai en 2026-07-08 The 88 Percent: AI Agent Security Incidents Are Now the Norm ai security, agent governance, sovereign ai, compliance, zero egress, audit https://mickai.co.uk/articles/eu-ai-act-live-2-august-2026-what-high-risk-deployers-must-prove Mickai en 2026-07-08 The EU AI Act Goes Live on 2 August 2026: What High-Risk Deployers Must Now Prove eu ai act, high-risk ai, ai governance, data sovereignty, compliance, sovereign ai https://mickai.co.uk/articles/data-provenance-is-now-the-law-eu-ai-act-article-10-signed-lineage Mickai en 2026-07-08 Data Provenance Is Now the Law: EU AI Act Article 10 and the Signed Lineage eu ai act, data provenance, ai governance, audit, sovereign ai, compliance https://mickai.co.uk/articles/the-right-to-an-explanation-automated-decisions-signed-record Mickai en 2026-07-08 The Right to an Explanation: Automated Decisions and a Per-Decision Signed Record eu ai act, automated decisions, auditability, post-quantum, sovereign ai, compliance https://mickai.co.uk/articles/iso-iec-42001-and-the-sovereign-runtime Mickai en 2026-07-08 ISO/IEC 42001 and the Sovereign Runtime: What an AI Management System Actually Asks For iso 42001, ai governance, sovereign ai, compliance, audit, data sovereignty https://mickai.co.uk/articles/sovereignty-is-compute-plus-control-uk-sovereign-ai-programme Mickai en 2026-07-08 Sovereignty Is Compute Plus Control: The UK Sovereign AI Programme and the Harder Half sovereign ai, uk policy, ai governance, compute, cryptography, audit https://mickai.co.uk/articles/air-gapped-by-design-running-inside-the-customers-infrastructure Mickai en 2026-07-08 Air-Gapped by Design: Why Running Inside the Customer's Infrastructure Is the New Baseline sovereign ai, air-gap, offline verifiability, data sovereignty, governance, post-quantum https://mickai.co.uk/articles/keeping-patient-data-on-the-ward-nhs-data-sovereignty Mickai en 2026-07-08 Keeping Patient Data on the Ward: NHS Data Sovereignty When the AI Is Local nhs, data sovereignty, clinical ai, offline ai, healthcare security, ai governance https://mickai.co.uk/articles/the-defence-ai-assurance-gap-proving-what-an-autonomous-system-did Mickai en 2026-07-08 The Defence AI Assurance Gap: Proving What an Autonomous System Did, On Your Own Keys defence ai, assurance, sovereignty, audit, cryptography, governance https://mickai.co.uk/articles/agentic-ai-needs-an-audit-trail-you-cannot-rewrite Mickai en 2026-07-08 Agentic AI Needs an Audit Trail You Cannot Rewrite agentic ai, audit trail, sovereign ai, eu ai act, cryptography, governance https://mickai.co.uk/articles/ai-agents-as-identities-per-action-permissions-hardware-attested Mickai en 2026-07-08 AI Agents as Identities: Per-Action Permissions and Hardware-Attested Authorisation ai agents, identity, hardware attestation, audit, sovereign ai, governance https://mickai.co.uk/articles/the-61-percent-why-regulated-europe-is-moving-to-local-ai Mickai en 2026-07-08 The 61 Percent: Why Regulated Europe Is Moving to Local AI sovereign ai, data sovereignty, eu ai act, regulated industries, local ai, audit https://mickai.co.uk/articles/signing-decisions-for-a-quantum-future-post-quantum-audit-for-ai Mickai en 2026-07-08 Signing Decisions for a Quantum Future: Post-Quantum Audit for AI post-quantum, ml-dsa, ai-audit, cryptography, sovereign-ai, compliance https://mickai.co.uk/articles/data-residency-is-not-data-sovereignty Mickai en 2026-07-08 Data Residency Is Not Data Sovereignty data sovereignty, data residency, sovereign ai, eu ai act, governance, compliance https://mickai.co.uk/articles/whose-root-of-trust-confidential-computing-versus-operator-owned-silicon Mickai en 2026-07-08 Whose Root of Trust Is It: Confidential Computing Versus Operator-Owned Silicon confidential computing, root of trust, sovereign ai, hardware attestation, data sovereignty, post-quantum https://mickai.co.uk/articles/one-offline-substrate-for-finance-healthcare-defence-government-legal Mickai en 2026-07-08 One Offline Substrate for Finance, Healthcare, Defence, Government and Legal sovereign ai, regulated industries, data sovereignty, offline ai, eu ai act, audit https://mickai.co.uk/articles/zero-egress-ai-an-inbound-perimeter-that-classifies-firewalls-and-signs Mickai en 2026-07-08 Zero-Egress AI: An Inbound Perimeter That Classifies, Firewalls and Signs zero-egress, data-sovereignty, ai-governance, inbound-perimeter, audit, eu-ai-act https://mickai.co.uk/articles/provable-offline-verifying-a-device-stayed-disconnected Mickai en 2026-07-08 Provable Offline: Verifying a Device Stayed Disconnected From a Public Key Alone offline verification, hardware attestation, post-quantum cryptography, sovereign ai, audit chains, zero egress https://mickai.co.uk/articles/no-single-model-should-authorise-a-consequential-action Mickai en 2026-07-08 No Single Model Should Authorise a Consequential Action agentic-ai, cross-model-consensus, ai-governance, sovereign-ai, audit, eu-ai-act https://mickai.co.uk/articles/the-right-to-be-forgotten-cryptographically-gdpr-article-17 Mickai en 2026-07-08 The Right to Be Forgotten, Cryptographically: Proof of Erasure Under GDPR Article 17 gdpr, right-to-erasure, sovereign-ai, cryptographic-audit, data-governance, machine-unlearning https://mickai.co.uk/articles/from-intent-to-execution-where-an-operating-system-fits-europe-sovereign-ai Mickai en 2026-07-08 From Intent to Execution: Where an Operating System Fits Europe's Sovereign AI Push sovereign ai, european union, governance, eu ai act, audit, sovereignty