Conclusions: Building and Securing AI Platforms

All courses / AI Platform and Security / Module 6 / Chapter 25

Learning objectives

After the lesson the participant can:

• State the book's thesis on when an AI platform is under control.
• Explain the eight conclusions and the tension each acts on.
• Assess an organisation against the three stages of the capability roadmap using the test of each stage.
• Draft a first-90-days platform and security plan with workstreams, outcomes and success measures.

Key concepts

The thesis

An AI platform is under control when everything that shapes behaviour is codified, versioned and evaluated together, every model call and tool call passes a policy point outside the model, containment holds whatever anyone intends, and evidence comes from normal operation.

Shared artefacts

A few artefacts serve several conclusions at once: the gateway is routing point, policy decision point, cost meter and source of the event log; the permission manifest and the release manifest likewise carry more than one conclusion.

Engineered trade-offs

Four conflicts that become design decisions with a cost: speed of defence against change control, rich telemetry against storage limitation, containment against value, and routing for cost against stable evaluation.

Capability roadmap

Three stages stated as platform capabilities, each with a test: one control point and a working stop in months 0 to 6, replaceable and ready for high-risk duties in months 6 to 18, and evidence on every release with autonomy by exception in months 18 to 36.

Observable and speculation

The labels the chapter uses in its forward look to separate what can be observed today, with sources, from what the author expects. The full outlook is in AI Governance, Chapter 22.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Teaching plan

Discussion

1. Sovereignty is said to depend less on where a model was made than on how fast it can be replaced. How fast could you replace the model behind your most important AI service, and how do you know?
2. A platform that does not budget for its controls will find them traded away in the first difficult quarter. Which control on your platform is unfunded?
3. The chapter says that if its judgements prove wrong the timing of the roadmap changes but not its order. Which stage of the roadmap would you be tempted to skip, and what would it cost later?

Written exercise

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

1. Why does the chapter say the inventory and every approval should name the usage mode and not the brand?

   1. Because brand names change too often to be kept in a register
   2. Because one vendor appears in several modes, and the mode determines what the platform must provide
   3. Because the AI Act forbids naming vendors in public registers
   4. Because the mode is easier to detect from proxy logs than the vendor
   Show the answer

   B. Because one vendor appears in several modes, and the mode determines what the platform must provide
   The usage-mode matrix is the platform's demand forecast: the same vendor's products need different control points depending on the mode of use.

2. How does the chapter reconcile the demand to protect within 48 hours with change management requirements that every change be reviewed?

   1. By exempting security patches for known-exploited vulnerabilities from DORA's change management requirements altogether
   2. By patching only at the monthly change window with extra reviewers
   3. By leaving the decision to each system owner at the time of the advisory
   4. By approving the emergency path, its canary rings and rollback in advance, making each patch a standard change
   Show the answer

   D. By approving the emergency path, its canary rings and rollback in advance, making each patch a standard change
   Control now has a clock, so pre-approved emergency paths are part of what control means.

3. What is the test of Stage 1 of the capability roadmap?

   1. No model calls outside the gateway, no standing credentials in AI workloads, and each Mode 5 agent stopped in an exercise
   2. A forced model migration rehearsed end to end and no unregistered skill or connector found in a quarterly scan of the estate
   3. An auditor reconstructing any release and any agent permission from records alone
   4. Every use case on the golden path and a first-attempt pass at every readiness review
   Show the answer

   A. No model calls outside the gateway, no standing credentials in AI workloads, and each Mode 5 agent stopped in an exercise
   Stage 1 is one control point and a working stop; the other options are the tests of Stage 2 and Stage 3 or measures from another chapter.