The Wrong Default

The library

Every edition, in full.

Explore the essays, search the full text, or follow a question. New readers can start with three editions.

Read by question

Who answers for the decision?Ownership & accountability. Who answers for a decision once a system has made it.What did we inherit from the vendor?Vendor & counterparty risk. What you inherit when you buy, rent or consume someone else's model.Where does the law already reach?Regulation & legal precedent. Where existing law already reaches, and where it stops.Is this control or ceremony?Governance theater. Controls that pass the audit and govern nothing.Who can stop it?Security & control failures. Boundaries nobody verified, and the off switch you do not hold.What is happening to the work?Work, talent & reflection. The people inside the system, and what AI is quietly trading away.

November 2026

  1. The Man Who Paid for the BoomJensen Huang resigned as Nvidia's CEO. The headlines are about his personal life. The useful question is who was paying for the AI boom, and what happens when the person signing the checks leaves. Ownership & accountability5 min read
  2. The Notetaker Nobody InvitedI denied a notetaker and received the transcript anyway. The person who can start the recording is not necessarily the person who can stop it. Ownership & accountability11 min read
  3. The Hour Is a DecisionThe time AI saves is being spent. Rarely by a decision anyone can point to. Ownership & accountability7 min read

October 2026

  1. The Sentence With No One in ItWhen a decision goes wrong, the person who made it is often the first thing to disappear. They disappear from the sentence before they disappear from anything else. Ownership & accountability4 min read
  2. Your Vendor’s Shortcut Is Still Your DecisionA newspaper, a government department, a drugstore chain and a legal research startup each learned what had happened in their own supply chain from someone outside it. Vendor & counterparty risk7 min read
  3. Nobody Owns the Factory SettingWater utilities in at least seven states, locked out of their own controls. Nobody chose weak security. Nobody chose anything. Call it the orphaned setting. Security & control failures8 min read
  4. The Unwritten TradeWhat is the true trade you are making by employing AI? Work, talent & reflection8 min read

September 2026

  1. You Can Price the Invoice. You Cannot Price the Work.Nobody at the vendor set your number. Nobody at your company can predict it. Vendor & counterparty risk14 min read
  2. You Cannot Write the Standard. You Can Write the Contract.You do not control the table where the AI standard gets written, and you are not going to. You do have a seat at the table where your own contract gets written, and almost nobody is sitting in it. Vendor & counterparty risk15 min read
  3. Sincerity Is Not a ControlAn Anthropic researcher walked away from unvested equity reportedly worth millions to sound the alarm. Then he recommended the one safeguard his own argument rules out. Governance theater14 min read
  4. You Cannot Spend Your Way Past the Deployment CeilingMoney buys seats and compute. It does not buy proof. That is what sets the ceiling. Vendor & counterparty risk5 min read
  5. Uber Is Spending Ten Billion Dollars on Something It Cannot StopUber is cutting 3,300 roles, about 10% of its global staff. Regulation & legal precedent3 min read
  6. Why AI? No, Seriously, Why?You bought the promise. The work is in the purpose. Regulation & legal precedent11 min read

August 2026

  1. You Do Not Own It Unless You Can Stop ItThree quarters say their CEO owns AI. Under a quarter say the CEO or executive committee is accountable. Two thirds of technology chiefs answer for AI they cannot control. Ownership & accountability9 min read
  2. You Cannot Own What You Cannot CountOne company put agents in the C-suite title. Then I went looking for how many agents there are. Ownership & accountability11 min read
  3. The Promise Failed Once. The Warnings Already Fail Today.Two CEOs warned your AI vendor learns from your usage. The vendors' own policies say otherwise. Vendor & counterparty risk7 min read
  4. You Do Not Buy AI. You Consume It.Software was a purchase with a signature on it. Consumption is a purchase that happens a few thousand times a day, and nobody signs. Vendor & counterparty risk6 min read
  5. Counterparty, Not ProductYour AI vendor has its own funding dependencies and its own fragility. No individual risk assessment can see the aggregate. Who owns vendor financial durability inside your organization? Vendor & counterparty risk8 min read
  6. New Problem, Old PanelA government bought a check on its own automated system the way it always had. The product had changed. The purchase had not. What buying AI-assisted assurance actually costs. Regulation & legal precedent7 min read
  7. The Attacker ConfessedUsually, a confession ends the threat. This one only revealed it. Security & control failures4 min read
  8. The Boundary Nobody VerifiedWhen "rogue AI" has a very human failure point. Security & control failures5 min read
  9. Provenance Dies at the First ScreenshotCalifornia’s AI Transparency Act goes live tomorrow. The law everyone expected Washington to kill verifies where content is born and goes blind exactly where it travels. Regulation & legal precedent9 min read

July 2026

  1. The Old GuardA new academic finding says the safest jobs for a long career are getting riskier for the workers who held that safety longest. The instinctive explanation is that older workers won’t learn the tool. Work, talent & reflection6 min read
  2. Sold on Both SidesOpinion. The AI-detection business and the AI-cleanup business are the same business. The only real judge was always the reader. Governance theater4 min read
  3. Nobody Owns the AgentEvery risk team knows who owns a data breach. Almost none can tell you who owns a decision an AI agent just made. Ownership & accountability4 min read
  4. It Already Had Your KeysThe Grok Build incident reads like a data breach. It is better understood as a category error: an autonomous agent was governed with the controls built for an app. Security & control failures6 min read
  5. What Your AI Contract Doesn't CoverThe enterprise terms you signed with your AI providers protect your prompts and outputs. They say much less about what those providers can observe in everything else. Vendor & counterparty risk12 min read
  6. The Chatbot That Practiced MedicinePennsylvania did not write a new AI law. It used the one it already had. Regulation & legal precedent4 min read
  7. The Underwriter Did the Inventory You SkippedBuying AI coverage outsources the one governance step you were supposed to own first. Vendor & counterparty risk5 min read
  8. The Insurance Market Already Named Who Owns Your AIInsurers just repriced AI risk. The bill lands on the company that runs the model, not the one that built it. Vendor & counterparty risk6 min read
  9. The missing institutionFor most of corporate history, business-critical technology arrived through procurement, legal, and a named owner. AI bypasses all three. Ownership & accountability1 min read
  10. Not at the Frontier. In Your Inbox.Google argued this month that existing law is enough to govern AI. The same day, it switched on face-and-voice capture across Workspace, on by default. One of those was going to be a problem. Regulation & legal precedent5 min read
  11. AI Governance: A Practical Health CheckLive from the Tech Alley stage, June 24th, 2026. Governance theater1 min read

June 2026

  1. I Swear, Your Honor, The Algorithm Did It.Running a decision through an AI does not make it the AI’s decision. Regulators have already proven that, twice, with a bill attached. Ownership & accountability7 min read
  2. AI Wrote It. AI Checked It. You Bought It.The fastest-growing source of governance risk is not the AI your team adopted. It is the code no human ever read, arriving inside what you buy. Governance theater5 min read
  3. The Off Switch You Don’t ControlIn June, the U.S. government switched off two of the most capable AI models on the market. Most companies cannot even tell you which models they would lose if it happened to them. Security & control failures6 min read
  4. Who Decides What's Critical?Every autonomous system promises a human in the loop. The question no one asks is who gets to draw it. Ownership & accountability6 min read
  5. The Compliance Agent That Isn'tWhen the machine is named after the function that failed. Ownership & accountability6 min read
  6. You Bought the Whole Stack. Who Owns the Decision?Every layer of AI security governs what the system can do. None of them governs whether it was right. Ownership & accountability9 min read
  7. AEO Is Selling Control That Doesn't ExistThe trend is real. The promise underneath the marketing is not. Governance theater7 min read
  8. The Default Is the PolicyThe AI rule financial firms are waiting for is not coming. The obligations are already here. Regulation & legal precedent8 min read
  9. The AI That Needs a HumanWhen the human is the product and the AI is the marketing. Governance theater8 min read
  10. Governance TheaterWhy the most dangerous AI governance is the kind that passes every audit. Governance theater9 min read

May 2026

  1. The Governance Gap Nobody Is Pricing InWhy AI vendor financial durability is a counterparty risk most governance frameworks don't assign to anyone. Vendor & counterparty risk11 min read
  2. The Conversation I Keep HavingIt starts with a business owner telling me they haven’t adopted AI yet. They’re being cautious, they say. Waiting until they understand it better. Work, talent & reflection3 min read
  3. Enterprise AI Has a People ProblemThe market measures seats. It's missing the people who matter. Work, talent & reflection4 min read
  4. Business Leaders Don't Have to Wait for RegulationGovernance is a decision you can make now. Regulation & legal precedent3 min read
  5. The Audit Trail You Don't HaveYour AI systems are being logged. Your AI decisions are not. Ownership & accountability5 min read

April 2026

  1. AI Is Training Your OrganizationNo one designed what it’s learning. Someone has to. Work, talent & reflection3 min read

Also by Thomas

Still in Charge

Still in Charge is Thomas’s free AI governance initiative for students, schools and families. Its newsletter, On Judgment, asks the same question for students and the adults around them: who is still doing the thinking. Every issue is archived at stillincharge.org.