[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"sanity-8PC6W9pIAreuotrnKLhro5RBUV-BKc5hoaZjq7cCkYE":3},{"data":4,"sourceMap":-1},{"info":5,"latest":26},{"_createdAt":6,"_id":7,"_rev":8,"_system":9,"_type":12,"_updatedAt":13,"account_id":14,"avatar":15,"bio":20,"employee":21,"name":22,"slug":23},"2026-06-15T14:59:23Z","1b045da2-7df9-4938-ae0e-7a485b4da10d","IXb0Y4DvAWeDheK0z5Sf3l",{"base":10},{"id":7,"rev":11},"o1gUjW0O273eyMG6EbYdv4","blogAuthor","2026-10-22T15:54:10Z",1189579,{"_type":16,"asset":17},"image",{"_ref":18,"_type":19},"image-225a75f6f91647dcd121a92f7d10dd8113d25f12-500x500-jpg","reference","AI systems architect and indie builder focused on agentic AI, trustworthy automation, and developer infrastructure.\n\nI’m the creator of PIC Standard, an open-source governance layer for high-impact AI agent actions, and NCP, a protocol-oriented approach to deterministic and replayable agent evaluation.\n\nMy work focuses on making AI agents safer to operate in real software environments: clearer intent, stronger constraints, better provenance, approvals, receipts, and debuggable execution.","none","Fabio Marcello Salvadori",{"_type":24,"current":25},"slug","fabio-marcello-salvadori",[27,95],{"_id":28,"author":29,"commentCount":35,"comments":36,"excerpt":37,"featureTag":33,"image":38,"publishedAt":42,"slug":43,"sponsored":33,"tags":45,"title":94},"ebcfb20b-77a8-4861-8d00-04bac4cbf04f",[30],{"_id":7,"avatar":31,"name":22,"role":33,"slug":34},{"_type":16,"asset":32},{"_ref":18,"_type":19},null,{"_type":24,"current":25},1,true,"The AI governance argument is happening one layer above the code that actually stops your agent.",{"_type":16,"alt":39,"asset":40},"Stylized illustration of a hand writing on a document surrounded by communication and planning elements.",{"_ref":41,"_type":19},"image-0c60f7b40db43d83c41e715c86e9764a779aaf8a-2560x1344-jpg","2026-10-28T19:27:07.461Z",{"_type":24,"current":44},"a-json-schema-is-not-an-ai-governance-layer",[46,81,89],{"_createdAt":47,"_id":48,"_rev":49,"_system":50,"_type":53,"_updatedAt":54,"description":55,"slug":78,"title":80},"2025-08-08T15:49:22Z","39391cf4-6f9a-4238-8670-c1e44b66db9e","09X6HDzCi2VfMov6gSLf7H",{"base":51},{"id":48,"rev":52},"TdCcmC7LyfLVwjB8GEXoh6","blogTag","2025-12-10T19:34:33Z",[56,67],{"_key":57,"_type":58,"children":59,"markDefs":65,"style":66},"a4b1a37cbbcc","block",[60],{"_key":61,"_type":62,"marks":63,"text":64},"d8e8f3e0fd9c","span",[],"These articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International license. ",[],"normal",{"_key":68,"_type":58,"children":69,"markDefs":75,"style":66},"7effd489c71f",[70],{"_key":71,"_type":62,"marks":72,"text":74},"538808bb5325",[73],"fd643b288690","creativecommons.org\u002Flicenses\u002Fby-sa\u002F4.0\u002Fdeed.en",[76],{"_key":73,"_type":77},"link",{"_type":24,"current":79},"cc-by-sa","CC BY-SA 4.0",{"_createdAt":82,"_id":83,"_rev":84,"_type":53,"_updatedAt":85,"slug":86,"title":88},"2023-05-23T16:43:21Z","wp-tagcat-ai","fpDTFQqIDjNJIbHDKPBGpV","2025-01-30T16:19:01Z",{"current":87},"ai","AI",{"_createdAt":82,"_id":90,"_rev":91,"_type":53,"_updatedAt":82,"slug":92,"title":93},"wp-tagcat-governance","9HpbCsT2tq0xwozQfkc4ih",{"current":93},"governance","A JSON schema Is not an AI governance layer",{"_id":96,"author":97,"commentCount":102,"comments":36,"excerpt":103,"featureTag":33,"image":104,"publishedAt":108,"slug":109,"sponsored":33,"tags":111,"title":133},"62aab15a-015a-4bf2-8b3e-b94cc3569770",[98],{"_id":7,"avatar":99,"name":22,"role":33,"slug":101},{"_type":16,"asset":100},{"_ref":18,"_type":19},{"_type":24,"current":25},6,"How attackers took twenty thousand Instagram accounts by asking Meta's AI politely, and why that failure is about to become common.",{"_type":16,"asset":105,"attribution":107},{"_ref":106,"_type":19},"image-cdf357e1d2df3af2d771981b5597c1a222b5606b-2400x1260-jpg","Alexandra Francis","2026-06-17T14:00:00.000Z",{"_type":24,"current":110},"ai-agents-expose-the-security-checks-you-never-actually-wrote",[112,116],{"_createdAt":82,"_id":113,"_rev":91,"_type":53,"_updatedAt":82,"slug":114,"title":115},"wp-tagcat-security",{"current":115},"security",{"_createdAt":117,"_id":118,"_rev":119,"_type":53,"_updatedAt":120,"description":121,"slug":130,"title":132},"2026-06-15T15:00:53Z","c9310194-f231-4342-a4aa-df4ad0452efe","MwgZb85ftkde1TTvSyOi3l","2026-06-15T15:01:32Z",[122],{"_key":123,"_type":58,"children":124,"markDefs":129,"style":66},"ef6a7da8a160",[125],{"_key":126,"_type":62,"marks":127,"text":128},"bca8dd798afb",[],"Everything that happens after the commit. ",[],{"_type":24,"current":131},"running-software","Running software","AI agents are a confused deputy with the keys to your kingdom"]