Skip to content

AI Governance

Principles do not field themselves: why I am writing RAIDops

I did not set out to write a book.

RAIDops began during my Master of Science studies in Columbia University's Information & Knowledge Strategy program. An independent study, guided by Blake M. DiCosola III and strengthened by the advice and input of Edward J. Hoffman, started as a literature review of trustworthy artificial intelligence in national defense. Blake and Ed are both IKNS faculty; Ed previously served as NASA's first Chief Knowledge Officer.

The review grew into a long paper. The paper kept returning to an unresolved organizational problem. Eventually, the problem outgrew the paper.

I invented RAIDops and coined the name Responsible AI Development Operations for the framework that emerged from that work. The working monograph is coauthored with Blake and Ed, whose substantive intellectual contributions, guidance, editing, and mentorship have materially shaped it.1 Their collaboration has made the work substantially better.

I have hesitated to write publicly about RAIDops because the research program is active and the manuscript is unfinished. I am not going to reproduce the complete pattern catalog, assessment instruments, or the book's full analytical machinery here. But a framework concerned with reviewability should itself be open to review. This essay offers the public argument: enough to explain and defend RAIDops, while preserving the monograph as the place where the complete derivation, architecture, patterns, evidence controls, and limitations belong.

The thesis is straightforward: trustworthy AI is not merely a property to test in a model. It is an operating achievement that an organization must repeatedly produce, challenge, bound, preserve, and sometimes revoke.

That problem is not abstract to me. It recurs across my work in enterprise AI engineering, knowledge systems, and public-sector technology: building a capable system is only part of the job. The institution must also keep the purpose, evidence, authority, and means of intervention intact as the system crosses teams, contracts, environments, and time.

Provenance has to survive the workflow

OpenAI has announced an expanded approach to content provenance, combining Content Credentials, SynthID watermarking, and an early verification tool. The work is meant to help people understand whether media came from an artificial intelligence system and how it may have been created or edited.

That is valuable context. Its usefulness depends on whether the context remains attached as content moves through the ordinary machinery of work.

Independent evaluation needs a secure place to work

The Center for Artificial Intelligence Standards and Innovation (CAISI) at the National Institute of Standards and Technology (NIST) has entered a cooperative research and development agreement with OpenMined. The collaboration is intended to advance secure methods for evaluating artificial intelligence systems.

The agreement points at a recurring barrier to credible assurance: evaluators need access to meaningful systems and evidence, while model developers, customers, and government organizations need to protect intellectual property, personal information, security-sensitive data, and operational methods.

Stateful agents make memory a governance problem

OpenAI and Amazon have announced a strategic partnership that includes plans to co-develop a stateful runtime environment for artificial intelligence agents. The phrase “stateful” deserves attention. An agent that can preserve context across steps and sessions may be more useful than one that repeatedly starts from zero.

It may also accumulate assumptions, permissions, and mistakes that no one intended to become durable.

Capability gating is a cybersecurity control

OpenAI has introduced Trusted Access for Cyber, an approach intended to expand advanced cybersecurity capabilities for legitimate defenders while placing additional controls around uses that could create harm.

The initiative highlights a problem that every organization deploying powerful artificial intelligence now faces: access control cannot stop at whether somebody may use a model. It has to consider which capabilities they may invoke, under what conditions, with what evidence, and through which escalation path.

A model constitution is an operating artifact

Anthropic has published a new constitution for Claude. The document is intended to shape how the model understands its role, weighs competing considerations, and behaves when a simple rule does not resolve the situation.

The interesting idea is not that an artificial intelligence system has a constitution. It is that governance becomes more useful when principles are written to support reasoning, implementation, testing, and revision—not merely to announce values.

Governance needs an evidence system

The new year has opened with a practical test for artificial intelligence governance. California's Transparency in Frontier Artificial Intelligence Act (TFAIA), enacted through Senate Bill 53 (SB 53), is now operative. It asks covered frontier developers for published frameworks, safety reporting, incident processes, and protections for employees who raise serious concerns.

The particulars apply to a defined group of companies. The lesson travels much further: a governance commitment is only as real as the evidence an organization can produce when somebody asks how the commitment works.

Multi-model cloud is a governance choice

Anthropic's November 18 announcement makes Claude models available in public preview through Microsoft Foundry and in parts of Microsoft 365 Copilot. Existing Microsoft customers can access another frontier-model family through familiar identity, billing, development, and productivity environments.

The immediate benefit is lower friction. The strategic opportunity is choice. Those are not the same thing.

READER-NEUTRAL SUBSCRIPTION

Follow Field Notes via RSS.

Copy this address into the RSS reader you already use. New notes will appear there automatically—no account, email address, or tracking required.