Governance & privacy7 MIN READ
What should trigger an agent governance review?
Review should follow material changes in purpose, authority, data, users, dependencies, evidence or incidents—not an arbitrary calendar alone.
THE SOFTLANDER BLOG
Agentic AI insights: security, evaluation and governance for AI agents
The next move. Considered. Ideas for the people turning agentic AI into real work: strategy, systems and the evidence behind better decisions.
Latest perspectives
123 articlesGovernance & privacy7 MIN READ
You cannot govern AI systems you have not inventoried
An AI inventory becomes useful when it identifies deployed systems, their context, owners, dependencies and review triggers—not merely a list of model vendors.
Strategy & transformation6 MIN READ
How to write an RFP for agentic AI without buying a promise
Specify the workflow, evidence, responsibility and exit conditions suppliers must meet, then evaluate them through representative scenarios.
Agent security6 MIN READ
Designing credentials that expire before trust does
Agent credentials should be shorter-lived than the assumptions that justify them. Bind them to a workload, audience, task and action, then prove renewal and revocation work.
Strategy & transformation6 MIN READ
Do you need an agent centre of excellence?
A centre can concentrate scarce expertise and reusable controls, or become an approval queue detached from real work. Choose the mandate before the structure.
Architecture & engineering6 MIN READ
Where smaller models can strengthen agent architecture
Smaller models are not merely budget substitutes. Used behind explicit routing and escalation rules, they can improve latency, locality and architectural control.
Evaluation & assurance6 MIN READ
Golden traces are useful—but they are not gold standards
A reference trace can explain one acceptable journey. Treating it as the only correct path can punish valid behaviour and conceal unsafe alternatives.
Strategy & transformation6 MIN READ
A quarterly watchlist for agentic AI leaders
A useful quarterly watchlist tracks changes that could alter real decisions: system authority, evidence, incidents, standards, providers and organisational readiness.
Agent security6 MIN READ
What evidence should survive an AI security incident?
Investigators need more than chat transcripts. Preserve identity, instructions, retrieved context, model and tool versions, policy decisions, credentials, network events and actual state changes.
Strategy & transformation6 MIN READ
Redesigning roles around human–agent collaboration
Do not divide work into “human” and “AI” columns. Redesign tasks, decisions, authority, handoffs and learning so each role remains operable and accountable.
Strategy & transformation6 MIN READ
Why promising AI pilots become permanent experiments
A successful demonstration does not create a live service. Pilots stall when they test capability without resolving ownership, integration, economics and operating evidence.
Cryptographic engineering6 MIN READ
Certificate expiry outages are a design failure, not bad luck
A certificate that expires in production was not forgotten by an individual. It was issued by a process that did not include renewal, into a system that had no way to reload it.
KEEP EXPLORING
Take the thinking
into your next discussion.
Read the method, assumptions and questions to ask.
A little more clarity
Questions worth asking.
Start with the questions that shape a better decision.
Which enterprise agent questions does the Softlander blog examine?
The blog examines where agents create business value, how teams define release evidence, how authority and tool access should be bounded, and how engineering, security and governance owners can make a shared decision.
Who are the articles written for?
They are written for product, engineering, AI platform, security, governance and transformation leaders responsible for moving an agent workflow from idea or pilot towards accountable operation.
How do the articles relate to Softlander’s services?
Articles explain the problems and decision methods behind the consultancy’s service direction. They are educational material and do not replace a scoped review of an organisation’s actual system.