Skip to content

Blog

Notes on AI, automation and security

Plain-English writing for people who have to make decisions about AI, not just read about it.

  1. What actually happened at the Medicare statistics portal

    An AI agent got into a government website it should not have. Here is what happened, in plain English, and what it means for an ordinary organisation.

    7 min read

  2. Tests first, checks not prose: how we build with AI now

    AI is not magic, and probability is a risky way to write code. Five rules for building with AI agents, all enforced by machines, and what each one prevents.

    6 min read

  3. What we took to Parliament House, and what the room asked

    Notes from the inaugural Australian AI Parliamentary Showcase: what we showed, the questions people actually asked, and the one nobody expected.

    5 min read

  4. Regulate the record, not the model

    Australia is writing its AI rules. The useful ones will not be about how big a model is. They will be about what a deployer can show afterwards.

    5 min read

  5. Start with the problem, not the AI, part two: the estimator and the bridge

    What it looks like when an AI system is measured against an expert on real work, and what 'thirteen of thirteen' actually means.

    4 min read

  6. Five questions to ask about the AI your team is already using

    Most organisations adopted AI eighteen months ago and have not looked at what it is producing since. Five questions, and how to answer each with evidence rather than opinion.

    4 min read

  7. AI, without the magic

    What is actually happening inside a language model, why it is confidently wrong sometimes, and what aviation can teach us about using it anyway.

    5 min read

  8. Start with the problem, not the AI

    A policing proof of concept cut about five hours per case to about thirty minutes, and set the problem-first approach behind TAGD and Cordexa.

    4 min read

  9. The gap between an AI demo and AI in production

    Experimenting with AI is easy. Running it in production, in a way a security officer will sign off, is a different job, and the gap is discipline rather than capability.

    3 min read

  10. Relaunching TAGD

    After ten years running technology at Comtrac, I am relaunching TAGD as a small practice for organisations that need technology decisions made and delivered.

    2 min read