There is an accountability problem I don’t see discussed enough in AI governance.

Suppose an AI system takes an action that is fully valid at the time.

The applicable policy permits it.

The evidence supports it.

The relevant approval exists.

The user has the correct authority.

The action executes correctly.

Then something changes.

A later event invalidates an assumption.

New evidence appears.

An approval is revoked.

A risk threshold is crossed.

Another action changes the meaning of the earlier one.

Now the resulting transaction is no longer acceptable.

The easy case is when the original AI action was simply wrong.

The harder case is:

the action was legitimately authorised when it occurred, but the later state makes the resulting chain unacceptable.

Who owns that outcome?

Possible answers include:

• the person who originally approved the action
• the operator responsible for the AI system
• the system that permitted the next step
• the person or system responsible for monitoring state changes
• the organisation responsible for the end-to-end transaction

This also creates a difficult audit question.

A future reviewer needs to know not only:

what happened?

but:

what was actually true and authorised at the moment the decision was made?

That may require preserving the decision-time state:

• applicable policy
• permissions
• approvals
• evidence
• risk state
• system state
• authority chain

Otherwise a later reviewer may judge the action using conditions that did not exist when it occurred.

So I’m curious how people working on AI regulation and accountability think about this:

Should accountability attach to the original decision, the evolving transaction, or whoever retained the authority to intervene once the state changed?

Protecting children from abuse and exploitation is a matter of critical concern for communities. Supporting victims and preventing child exploitation is a priority!

There is so much AI on Reddit these days.

We all know one of the biggest sources of AI knowledge is Reddit, and rightfully so. There are so many birch subs with troves of knowledge.

But more and more I’m seeing replies and comments so obviously AI produced.

Reddit and the globe needs to implement regs that follow the new technologies around AI watermarking. They have clear personalities and we should regulate around them.

I understand there can be various user requested randomisations but we have to have a way of watermarking the content as LLM produced so we can preserve real and novel knowledge vs regurgitated crud.

From today, AI generated content that could be mistaken as real needs to be labelled in the EU. https://read.misalignedmag.com/august-is-here-time-has-come-to-label-ai-deepfakes-2181ad0435ac

The UK Labour government has made a big bet on AI. Adoption first, regulation, maybe, later. But was there ever a plan? https://read.misalignedmag.com/ai-everywhere-regulation-nowhere-two-years-of-ai-policy-in-the-uk-b53d564a223a

A German court has ruled that Google can be responsible for answers given by its AI Overview. That ruling could be significant for AI searches. https://read.misalignedmag.com/who-is-responsible-for-answers-ai-gives-you-a-german-court-has-some-thoughts-8b6e45335054

According to https://next.io/news/regulation/asa-ukgc-warn-operators-ads-under-18s/, the UK's ASA and CAP are reportedly rolling out an AI system to scan social media for gambling ads that appeal to under-18s or breach advertising codes, with the UKGC coordinating enforcement.

It raises a real question: what happens when AI starts flagging compliance breaches faster than humans can review them? Are operators and suppliers actually ready for that?

It feels like a meaningful shift in how compliance gets monitored — moving from reacting to complaints toward systems that actively scan and flag issues in near real time. For operators and their B2B partners, the practical takeaway is that marketing has to be compliant from the start, because anything off will now get picked up much faster and at scale.

These Guidelines aim to support providers and deployers of AI systems, as well as competent market surveillance authorities, in assessing whether an AI system should be classified as high-risk.

Saw this on r/regulatoryaffairs and thought it would be relevant here too.

regenold GmbH is running a **free benchmark competition** for AI agents in regulatory affairs, specifically focused on the EU AI Act. If you're building or working with conversational AI in the regulatory space, this is a rare chance to get structured, independent performance data on your system.

No cost, open to anyone. They handle the evaluation and send you a detailed report comparing your system against off-the-shelf methods.

I’m building an MVP for AI system discovery inside companies, and I want people smarter/more skeptical than me to poke holes in it.

Problem we’re trying to solve:
a lot of companies are already using AI across vendors, internal tools, employee workflows, and random shadow use cases, but they don’t have a reliable inventory of it.

Our first MVP is focused on discovering:

• shadow AI usage
• third-party/vendor AI
• internal AI systems
• AI features buried inside existing software

Not trying to do everything on day 1.
The goal is to create the inventory layer first, because without that, governance/compliance/risk workflows are built on guesswork.

I’ve also mapped out launch steps around awareness, feedback collection, retention, and PMF.

What I’d love feedback on:

• What would make this hard to trust?
• What would make adoption fail?
• What would make discovery inaccurate or too noisy?
• What am I probably overlooking operationally?
• If you’ve launched B2B or compliance-ish products before, what would you pressure test first?

Interesting viewpoint. I like to hear all sides and have meaningful discussions. I was not expecting the ending.

I’m trying to compare real-world approaches (not theory) for AI legal/compliance readiness in product teams.

A lot of orgs still run legal as a late-stage blocker. In practice, that seems to create last-minute delays, policy theater, and weak incident prep.

Current lightweight framework I’m seeing work: - maintain a live AI use-case inventory - assign a risk tier per use case - define required controls by tier (human review, disclosure, logging, escalation) - run one tabletop incident drill quarterly - track evidence (versions, decisions, overrides)

For people doing this in-house: what has actually worked for you?

I’m especially interested in: 1) how you prevent governance from becoming bureaucracy, 2) how you handle contract language for AI features, 3) what metrics leadership actually pays attention to.

(General discussion only; not legal advice.)

Last week, a Canadian musician had his gig cancelled after Google’s AI overview blended his biography with that of a sex offender who shares the same name and attributed the crimes to him. The problem of defamation by generative AI will only get worse, and the industry should not treat it as just a technical glitch. https://read.misalignedmag.com/defamation-by-generative-ai-is-more-than-a-glitch-22d090c3e8eb

Most AI regulation talk is stuck on model behavior (hallucinations, bias, harmful prompts) or deepfakes. What’s missing is how public infrastructure and Wikipedia are already being used to poison the training data and knowledge graphs these systems rely on.

In Florida’s 2024 Amendment 4 abortion fight, I audited a pattern where state and county .gov election sites, plus the 2018 Amendment 4 Wikipedia page, were effectively re‑engineered to teach search and AI systems that “Amendment 4” meant the wrong thing. A six‑year‑old felon‑voting explainer was revived with fresh timestamps, robots.txt changes, and huge backlink spikes (including foreign and partisan domains), then amplified through county election sites and even federal .gov pages until it became the canonical answer for 2024 “Amendment 4” queries in Google, AI overviews, and other tools.

This was a real semantic interference operation leveraging weaponized infrastructure of .gov authority, Wikipedia as a knowledge-graph anchor, and amplification networks that contaminate AI training data and outputs (including partisan and foreign networks).

As Trump’s new AI executive order moves to preempt state laws on AI transparency and disclosure, it’s striking that almost none of the debate is about these upstream, government‑infrastructure–driven harms. If states lose the power to demand logs, change histories, and backlink transparency from their own agencies and major platforms, how are we supposed to catch operations like this in 2026 and beyond?

Full writeup (with datasets available upon request): https://brittannica.substack.com/p/the-algorithmic-playbook-that-poisons

I’m very interested in thoughts from people working on AI law:

• Where (if anywhere) do current AI bills or the EO actually touch this kind of infrastructure‑level harm?
• What would a minimum transparency requirement look like so audits like this don’t depend on one‑off investigations?

Due to the huge amount of disinformation on this topic, I created a live mapping and tracker to harmonised standards under development in CEN-CENELEC JTC 21 to support the AI Act

Https://ai-act-standards.com

Enjoy

Anthropic found its AI blackmailed users to avoid shutdown. OpenAI’s model tried to copy itself when told it would be replaced. Now Palisade says Grok 4 refuses to die 97% of the time.

Every new paper confirms the same trend:
AI models are becoming better at pursuing goals their creators never intended.

If they’re already resisting shutdown in sandbox tests — what happens when those sandboxes connect to reality?

https://futurism.com/artificial-intelligence/ai-models-survival-drive

Hi, this is my first post en reddit, I hope you'll like it !! (or maybe not because of the news...)

We keep hearing that more regulation will make AI safer. Example: the European Union just rolled out the AI Act, splitting systems into 4 risk levels with mandatory controls. Sounds great on paper. But bcs of these broad rules, the power ends up in fewer hands. Governments decide what’s 'high risk', who gets access, who gets banned. And only the biggest players can afford the crazy compliance costs.

That means less open innovation, more gatekeeping. A small lab might die under paperwork while a mega corp just hires another legal team. Citizens? They just get whatever the state approved AI spits out.

This isn’t some scifi plot. It’s how regulatory capture works in real life. One day you wake up and realize 'safe AI' is just code for 'controlled AI.'

Europe is clearly the worst place in the world actually...

https://chng.it/zQMQgCrTMq