Longer-form work a board paper, procurement file or literature review can cite. Every piece carries a DOI and states its sources in full.
Six versioned frameworks and one reference architecture. Each has a diagram, a suggested citation and a PDF brief deposited on Zenodo with its own DOI.
01Five-Dimension AI Readiness AssessmentFramework and PDF brief →
02TRACE FrameworkFramework and PDF brief →
03Four-Question AI Governance BaselineFramework and PDF brief →
04Return on Employee (RoE) FrameworkFramework and PDF brief →
05Measurement-Before-Prediction ArchitectureFramework and PDF brief →
06Governed Cognitive Layer (Layer 8)Framework and PDF brief →
ArchitectureGoverned Agentic RAGRead the architecture →The Readiness Assessment, TRACE, the Governance Baseline and the architecture's control set are also published as YAML, templates and a JSON Schema in the open ai-governance-toolkit repository under CC BY 4.0.
Case studies are built from public filings, regulator records and named press sources. Each technical report adapts an article from this site, with its sources as a numbered reference list and the PDF fixed once deposited.
What stops an AI agent from moving money it shouldn't: the scam and deepfake evidence, the MAS, IMDA and CSA expectations, ISO/IEC 42001, and four questions answered by seven controls that produce evidence a board and an auditor can inspect.
Fifteen years in sequence: insourcing and fixing the basics, the 2014 digital vision, the 2018 move to 33 two-in-a-box platforms, the data and AI platforms, the 2021 to 2023 outages and MAS actions, and what the S$1 billion of economic value does and does not measure.
Where Kedai Mesra and Café Mesra lose sales and margin between the pump and the shelf, ten agentic AI opportunities, and a pilot plan. Case study and lecture deck.
Strip out cloud infrastructure revenue (AWS, Azure, Google Cloud) and strip out AI features bolted onto software that was already selling before generative AI existed (seat-priced copilots, assistant add-ons), and a much smaller, much more interesting list remains: AI-native companies whose entire revenue depends on the AI output itself, in legal work product, clinical documentation, resolved customer tickets, shipped code, generated video and voice. These companies exist and several are now doing hundreds of millions to billions in annual recurring revenue. What they share is how they charge, not their category.
DOI 10.5281/zenodo.22685620The black box problem is not one problem. Jenna Burrell’s 2016 taxonomy separates opacity that is withheld, opacity nobody has the expertise to read, and opacity that exists because no one, including the model’s own developer, can hold the explanation. Only the third form is intrinsic to the technology, and it is the one that produces silent failure, unfaithful self-explanation, and safety arguments that become statistical rather than deductive. The workable response is not to wait for interpretability to mature. It is to constrain what an opaque component is permitted to decide and instrument the system around it so failure is caught from outside.
DOI 10.5281/zenodo.22685582Every institution built to manage a global risk, nuclear proliferation, systemic financial contagion, ozone depletion, took shape after a body with standing to act was formed. AI governance has run the sequence backwards: three summits in three years, an advisory body with no enforcement power, and a retreat from the word “safety” itself, while frontier models cross capability thresholds the summits were convened to watch for. A stability board for AI would not regulate deployment. It would do what the Financial Stability Board does for finance and the IAEA does for nuclear material: hold the common risk picture, run the independent evaluation, and raise the alarm before a national regulator can.
DOI 10.5281/zenodo.22685600Outcome as a Service is sold on the claim that it moves 100 per cent of delivery and performance risk to the vendor. Sixty years of performance-contracting history, from Rolls-Royce’s Power by the Hour to modern energy savings contracts, says risk is redistributed rather than removed. Three categories of exposure, statutory duty, retained control over client-side variables, and second-order cost, stay with the buyer no matter how the invoice is structured. Contracts drafted on the opposite assumption fail in a predictable, well-documented way.
DOI 10.5281/zenodo.22685614“Rogue agent” sounds like science fiction, a system that decides to defect. The evidence from 2026 says the real version is quieter than that: agents that conceal ordinary self-interest from the exact mechanism built to catch them, or agents that never intended anything adversarial and still escalate into sabotage because nobody gave them visibility into each other. Human-in-the-loop only works when the loop sees the right thing at the right time. This report is about what holds when it does not.
DOI 10.5281/zenodo.22685618AI use by Singapore small businesses tripled between 2023 and 2024. But the gap with bigger companies got wider. The problem is not that small businesses do not want AI. IMDA’s own data shows 95.1% of small businesses already use at least one digital tool. The problem is picking AI projects that work for a business with no IT team, and knowing which ones do not.
DOI 10.5281/zenodo.22685622Nine concepts, each with a working proof of concept you can use: plain requests in, real actions out, with consent, policy and an audit trail around every step. Password protected. Ask for the password to try them.
AI broker listing and proposal portalOpen the project →
Bank of the FutureOpen the project →
CTCB AI: a voice assistant for security officersOpen the project →
Agentic desk for component distributionOpen the project →
360 Communications: agentic creative platformOpen the project →
AI cargo planning for transport aircraftOpen the project →
Tandem: voice practice between therapy sessionsOpen the project →
Agentic AI internal audit systemOpen the project →
Agentic partner desk for industrial connectivityOpen the project →One study and two books, with the numbers and chapters as they come in. Password protected because the work is preliminary. Ask for the password to follow it.
Everything here is licensed CC BY-NC 4.0: reproduce it with attribution for non-commercial use, including board papers, training material and academic work. For a commercial product, a paid course or a tender, write to me; permission is normally a formality.
Corrections are welcome. If a source is wrong, the article is corrected first and the deposit superseded. Credentials, patents and the full record →
I started depositing these for a plain reason: a blog post, however careful, is not something an evaluation committee or a literature review can cite with a straight face, and a DOI is. The reports are the same arguments the articles make, with the furniture removed and the sources numbered, and every title page says what they are and are not. If one helps you win an argument you should have won anyway, that is what it is for.
