You Can't Govern What You Can't See

Show notes

Something goes wrong in production, someone senior asks "walk me through exactly why the AI did that" — and the room goes quiet. That silence is the most expensive sound in enterprise AI right now. This week, the tested read on the two least exciting words in the whole stack — governance and observability — and why the part nobody demos is the part that ends careers.

This episode of Above the Noise — the unbiased AI brief for enterprise leaders:

• News Brief: The EU AI Act high-risk deadline (Aug 2) and the Article 12 logging language nobody's ready for · SR 11-7 just got rescinded — and U.S. regulators handed AI governance back to you · the half-billion-dollar "AI governance" land-grab, and what its existence quietly admits.
• Deep Dive: What governance and observability actually are, why almost no platform ships them (four structural reasons), and why you cannot bolt them on in "phase two."
• Expose a Lie: "Our logs are our audit trail." Three breaks, each fatal — and the one question that turns the room honest.
• The question to sit with: Could you prove, to a hostile outsider, exactly why one of your AI systems made one specific decision ninety days ago?

No vendors. No hype. Just the signal.

👉 Follow Above the Noise wherever you listen — new episode every two weeks. Share it with one leader who keeps saying "we log everything," and leave a rating so more people find it. Between episodes, find Shaun on LinkedIn — come argue with him there.

🔗 Show Notes & Sources

Every stat in this episode is sourced. Check the work yourself:

EU AI Act — high-risk deadline & logging

• What the EU AI Act requires for AI agent logging (Help Net Security)
• Article 12: Record-keeping / logging (EU AI Act)
• Article 26: Obligations of Deployers of High-Risk AI Systems (EU AI Act)
• EU AI Act 2026 Updates: Compliance Requirements & Business Risks (Legal Nodes)
• EU AI Act Omnibus Agreement — Postponed High-Risk Deadlines (Gibson Dunn)
• EU agrees to delay key AI Act compliance deadlines (Travers Smith)

SR 11-7 rescission & financial-services AI governance

• Model Risk Management: Revised Guidance — OCC Bulletin 2026-13
• OCC Issues Updated Model Risk Management Guidance (news release)
• Federal Banking Agencies Issue Revised Guidance on Model Risk Management (Sullivan & Cromwell)
• GenAI: Continuing and Emerging Trends (FINRA 2026 Annual Regulatory Oversight Report)
• FINRA flags generative AI risks and governance expectations (DLA Piper)

The governance/observability market

• Cognizant–ServiceNow "continuous AI assurance" partnership
• Snowflake Horizon Catalog centralizes AI governance
• Hyland Enterprise Agent Mesh / Control Tower (Help Net Security)
• Global AI Regulations Fuel Billion-Dollar Market for AI Governance Platforms (Gartner)

Production reality & observability

• 80% of Fortune 500 use active AI agents (Microsoft Security Blog)
• Stanford 2026 AI Index — security & risk = #1 barrier to scaling agentic AI
• Stanford AI Index 2026: Why 62% Say Security Blocks Agentic AI Scaling (Kiteworks)
• 2026 is the year of enterprise AI governance — Forrester 60% F100 (Speakeasy)
• Gartner: Over 40% of Agentic AI Projects Will Be Canceled by End of 2027
• Agent Observability: LangSmith, Langfuse, Arize 2026 (Digital Applied)
• AI Agent Observability — Evolving Standards (OpenTelemetry)
• The Enterprise Guide to AI Agent Observability (Galileo)
• AI Agent Observability Guide (groundcover)

"Our logs are our audit trail" — the receipts

• The Audit Trail Paradox: Why Your LLM Logs Aren't Proof (DEV)
• How to Build AI Audit Trails That Stand Up to Regulatory Scrutiny (CX Today)
• Auditing and Logging AI Agent Activity (LoginRadius)
• GxP Audit Trails for AI: 21 CFR Part 11 & Annex 11 (IntuitionLabs)

Topics covered: AI governance, AI observability, EU AI Act, high-risk AI, Article 12 logging, SR 11-7, OCC Bulletin 2026-13, model risk management, FINRA generative AI, AI audit trail, agentic AI, LLM observability, OpenTelemetry, regulated industries, enterprise AI strategy