Insights
Practical notes from the work.
How to adopt AI, how to test it, and what the EU Cyber Resilience Act asks of vendors.
EU Cyber Resilience Act timeline: what applies now and what comes in December 2027
The CRA's reporting duties started on 11 September 2026. Here is what is already in force, what arrives on 11 December 2027, and what vendors should do in the meantime.
How to evaluate an LLM application before you launch it
A practical method for testing LLM apps, RAG systems and agents: build a test set from real tasks, score with calibrated graders, separate retrieval from generation, and run it on every change.
AI enablement: a practical first 90 days for your company
A step-by-step plan for adopting AI in a company: pick a first use case, set safe-use rules, run a pilot, and measure the result against a baseline.