Blog

Field Notes

Practical AI and IT -- from the operator's seat.

  1. Ask to See the Design Before an AI Vendor Touches Client Data

    Before an AI vendor touches client data, ask to see the design. Five questions to ask, and our private LLM architecture, unfinished parts included.

    • AI governance
    • NIST AI RMF
    • HIPAA
    • legal tech
    • financial services
    • regulated SMB
    • private LLM

    The AI Governance Diagram Was Drawn for Someone Else

    The six-layer picture of AI governance assumes you train models and answer to the EU. A practice that deploys a published model keeps the layers and changes four things. Here are the four, and the one test every control has to pass.

    • AI
    • LLM
    • architecture
    • HIPAA
    • legal tech
    • financial services
    • regulated SMB
    • ik_llama.cpp
    • Qwen3

    The Architecture Behind Private AI for Regulated Practices

    UpToDate Expert AI, Westlaw CoCounsel, and every other commercial AI product serving healthcare, legal, and regulated industries share the same structural flaw. Here's what's actually running on the other side of that wall, why the choices are what they are, and what changes depending on how many people are asking.

    • cybersecurity
    • fraud
    • SMB
    • fintech

    I Wrote a Three-Part Series on Business Fraud and Why the Obvious Fixes Don't Work

    The fraud debate focuses on liability -- who pays after the loss. That's the wrong question. A three-part series on where fraud actually enters the financial system, and what closes the gap.

    • AI
    • HIPAA
    • private LLM
    • SMB

    Your Business Is Already Using AI. The Question Is Whether You're Doing It Safely.

    Most businesses don't choose how they adopt AI -- they drift into it. Here's a framework for understanding the three levels, and why most businesses are stuck at the wrong one.