AI-360 — AI from all perspectives: Where business & innovation meets application & regulation.

Workday’s planned C1.ai acquisition and expansion of Sana connect autonomous work with scoped identities, approvals and action records, offering a clearer model for governing non-human workers.

The rollout shows how frontier model launches are becoming exercises in controlled access, misuse testing and post-release evidence, especially where cyber capabilities are material.

A UK committee hearing has concentrated attention on the powers, independence and timing of model testing, including whether authorities can compel disclosure or stop a release.

Regulators are asking banks to show how autonomous systems are bounded, observed and stopped, shifting the debate from AI principles to evidence that supervisors can test.

The latest AI Control Tower release expands discovery, governance, security and monitoring, including options to identify and block unapproved AI services through partner and endpoint data.

A government consultation proposes rewards for significant original information that leads to an SFO conviction or enforcement action, raising new questions about triage, provenance and retaliation risk.

Updated Google Cloud guidelines prohibit fraudulent or unauthorised transactions and require explicit approval for financial, insurance and other high-impact actions.

Ministers want serious AI incidents and near misses brought into a national reporting and response system, moving the governance debate from model testing towards operational accountability.

According to some colour consultants, the familiar spring, summer, autumn and winter palettes can be divided into 16 seasonal types, giving a more nuanced reading of which colours suit you. We have 16 stories in this week’s newsletter. That is the link. I appreciate it is doing very little.

Early Warning argues that executive and vendor impersonation exploits inconsistent payment controls across multiple banking relationships, not just a failed biometric check.

The UK regulator says ten major foundation-model developers have changed or committed to change their practices and has opened a six-week evidence call on autonomous agents.

Quantum XChange says a federal agency has put PQC controls into production at 15 sites. The case is useful, but buyers still need architecture, validation and failure evidence.

The identity vendor has expanded biometrics, document intelligence and fraud detection, while its headline deepfake result needs scrutiny of methodology and failure cases.

Protect 360 blends credit monitoring, dark-web alerts and data-broker removal, showing how banks are extending customer protection beyond payment fraud.

The compromise affected information linked to clients of Goldman Sachs and Man Group without breaching the firms’ own systems, sharpening the case for deeper third-party assurance.