I ran a scanner on my own network and found AI quietly sending data out of the country.
What an afternoon with my own traffic turned up — and the question it left me with.
Read on LinkedInInsights
The thinking behind shipping AI into regulated systems.
I write the deep dives here first — canonical, unhurried, ungated. Then I share them, and the best of what I'm reading, on LinkedIn, dev.to and X.
Start here
Deep dive8 min read
The AI Audit Trail That Survives an Inspection: capture, seal, replay
You can't audit a model that retrains — you audit the trail. What to capture, how to seal it tamper-evident, and how to replay one decision when the auditor asks.
By André Queiroz · dezotech
More deep dives
More deep dives in the pipeline.
Deep dive
Shadow AI Is Already in Your Org: a 90-day containment plan
What to find, what to fence off, and what to formalize — before unsanctioned AI shows up as an audit finding.
8 min read
Deep diveAdopt AI Without Failing Your Next Audit: a 2026 playbook
The exact frameworks, guardrails and shadow-AI assessment I run on real engagements — for the people who'll be in the room when the auditor asks "who approved this?"
9 min read
Join the newsletter
Subscribe and the next deep dive lands in your inbox before it hits LinkedIn.
Not articles — just the threads, posts and notes worth your time, hand-picked from where I work in the open. Links go out to the original.
I parsed my own firewall logs to find the Shadow AI my DLP never saw.
The method, the eTLD+1 matching trick, and the blind spot vendor blogs skip.
Read on dev.toShip & Stay Compliant
Practical playbooks, straight to your inbox.
Automation, legacy modernization & safe AI adoption. Free: the AI-Adoption-Without-Audit-Failure checklist.