There is a number that should concentrate the mind of every CIO, CISO, and chief risk officer: one billion. According to IDC’s February 2026 report *Operationalizing Trust for Agentic AI*, the global population of deployed AI agents is on course to pass one billion by 2029 – roughly a 40-fold Read more
Version control is the foundation of every software project. It is where code goes from “written” to “official.” For organizations deploying AI coding agents, it is also one of the most critical enforcement points – because a commit that lands in the main branch is, in many senses, a fact. Read more
You have evaluated an AI agent’s proposed action against your policies, and the answer came back: ALLOW. The action is permitted. Now what? In a naïve governance system, “allowed” means the action runs without further constraint. But in any real-world deployment, this creates a problem: the system’s behavior after approval Read more
There is a classic security engineering question that reveals a lot about a system’s design philosophy: what does it do when something unexpected happens? When a system encounters ambiguity – a request it cannot fully parse, a condition it was not designed to handle, an edge case that falls between Read more
Security engineers often talk about “defense in depth” – the idea that no single control should be the only thing standing between an attacker and damage. coding-ethos and Ethosure apply this principle through a clean architectural separation between two layers with different jobs: the control plane decides whether an action Read more
Every company deploying AI coding agents faces the same uncomfortable question: how do you know what the agent actually did, whether it followed your rules, and whether the evidence would hold up to a regulator’s scrutiny? Ethosure’s answer rests on an open-source project called coding-ethos, built and owned by one Read more
Conversations about AI governance often stall because the people in the room have different jobs, different concerns, and different definitions of what a solution looks like. The CISO is thinking about access controls. The chief risk officer is thinking about bounded, demonstrable governance. The compliance officer is thinking about audit Read more
Something unusual is happening in enterprise technology right now. Organizations are deploying AI agents at a speed that their governance, risk, and compliance functions have not matched. This is simply the nature of how fast the underlying technology has matured and how compelling the productivity case has been. But the Read more
AI agents are useful because they act. They write code, run commands, query databases, and make changes to systems – often faster than any human reviewer can follow. That speed is the whole point. But it creates a problem most organizations are only beginning to confront: if an agent does Read more
