THE BRIEFING CENTER

Three storylines converged this week around a single idea: governance that arrives before the fact matters more than governance that arrives after. The European Commission's new Action Plan on Cybersecurity and AI commits to testing frontier models before they reach the market, not after they cause a problem. Reporting on the U.S. government's review of OpenAI's latest model reveals what a "safe to release" checkpoint actually inspects — and what it doesn't. Meanwhile, a wave

Brussels just gave the AI Act's high-risk obligations another 16 to 24 months of runway — not because the rules changed, but because the assurance infrastructure to support them isn't built yet. Vietnam took the opposite approach, skipping principles entirely and standing up a registry-backed AI law with a named, accountable local representative for every foreign deployer. Meanwhile the Cloud Security Alliance's data shows the accountability gap isn't really about visibility