The AI Act and AI agents: obligations by role
From intended purpose to the value chain: define the system, classify risk and assign responsibility before selecting controls.
Read article →We do not claim a property because it compiles. We attempt to destroy it. What survives is published.
AI Act analysis for businesses and AI leads, alongside technical essays by Borja Fernández Angulo on agents, control and information thermodynamics. New regulatory articles are identified as AI-assisted technical syntheses, with explicit sources and limits.
From intended purpose to the value chain: define the system, classify risk and assign responsibility before selecting controls.
Read the analysis →From intended purpose to the value chain: define the system, classify risk and assign responsibility before selecting controls.
Read article →Authority, context and intervention: a technical reading of human oversight for high-risk agentic systems.
Read article →Automatic logs, retention and custody: distinguish integrity, completeness and independent observation of an effect.
Read article →The software industry treats LLMs as an isolated «mind» and external tool execution as mere peripheral plumbing. A mathematical demonstration under Noether invariants, Landau free energy landscapes, and Markov blankets of why latent inference and deterministic silicon mutation are co-emergent in production.
Why traditional frameworks (LangChain, AutoGen, CrewAI, vector databases, and prompt guardrails) fail in mission-critical production, and how a Ring-0 Rust micro-kernel, L1 Touch ID P-256 biometric friction, and WORM memory verified under Lean 4 define the true state of the art.
Why standard RAG and cosine similarity collapse against the Consistency Wall, and how lock-free shared memory (iceoryx2) enforces deterministic epistemic vetoes.
Prompt engineering models a statistical tendency without boundaries in process space. Why mission-critical production demands deterministic mediation and fail-closed process boundaries outside the model.
The race to build capable agents creates systems that execute complex workflows but flounder when faced with the critical inquiry: what did the model know when it acted, and can you prove it wasn’t altered?
Technical dissection of five dominant philosophies: personalization (Mem0), memory OS (Letta), bi-temporal graphs (Zep), state machines (LangGraph), and verifiable custody (CORTEX).
Industry semantic inflation: why calling APIs does not confer autonomy, and the architectural divide between reactive assistants and systems with persistent objectives.
AI agents rarely fail due to loud exceptions; they fail because nobody measured the distance between what they do and what they were designed to do. Closing the cybernetic control loop.
Foundational research on information thermodynamics, signal theory, and decision systems:
The Kantian firewall via Free Energy (Friston), the somatic audit of blood (Escohotado), and physical computation bounds.
Read research →Strict topological incompatibility between O(1) subtractive binary filtering and Nigel Godrich’s non-linear transduction.
Read research →We do not hide architectural scars. Every milestone in BABYLON-60 stems from a prior hypothesis destroyed by silicon telemetry. We publish the quantitative counterexamples where containment failed to certify true operational boundaries.
“Lock-free ring-buffers (256/4096 slots) guarantee lossless message transport for high-frequency concurrent agent swarms.”
Hypothesis refuted. Expanding ring-buffer depth does not resolve asymmetric saturation. Architecture mandates credit-based admission control, explicit rejection, and deterministic backpressure: accepted(m) ⟹ eventually [committed(m) ∨ explicitly_rejected(m)].
“The observed ~1.23 ms per-message latency is attributable to Ed25519 signature verification computational overhead.”
Bottleneck hypothesis refuted. Cryptographic verification is not saturating the consumer. Formal isolation enforced: Transport Latency ≠ Verification Latency ≠ Decision Latency ≠ Committed-Effect Latency.
“Restricting POSIX permissions to 0700 on SHM segments isolates shared memory against hostile child processes or compromised agents.”
Security hypothesis refuted. Flat chmod 0700 does not isolate processes sharing the same UID. Enforces OS-level sandboxing (macOS Seatbelt/sandbox-exec, Linux namespaces/cgroups) and a Ring-0 capability broker with strict provenance checks.
“Calling thread::yield_now() in lock-free polling loops guarantees cooperative, efficient CPU yielding in multicore agent fleets.”
Hypothesis refuted. yield_now() is not a viable synchronization primitive under load. Migration to adaptive exponential backoff with os_unfair_lock/futex during quiescence, transitioning to event-driven IPC during peak load.