The validation gate: stopping a wrong identification

Access is not capability: what an AI purchase does not buy

Everyone Around You Just Got Faster

Through 2026, vendors serving principals, and household staff, have increasingly delivered profiles and vetting reports a model helped assemble. This brief asks what an AI license or AI-assisted engagement actually delivers to a protective program, and what must be specified separately before its output is acted on. Built from practitioner and workplace research, the automation-bias literature and the firm's review of vendor deliverables. For family offices and security leads buying AI tools or services.

The sanctioned counterparty: consolidation moves the exposure

They Kept the Promise and Kept the Data

The usual fix for staff using AI in personal accounts is one approved platform on enterprise terms, and in 2025 a federal court ordered an AI provider to preserve conversations its users had deleted. This brief asks what consolidation actually changes about a principal's exposure and how much a no-training pledge covers. Built from vendor telemetry, breach-cost research, that court record and observation of household use. For family offices and counsel choosing and governing an approved platform.

Bias is not a coordinate

In June 2026 the Washington Post published an open-source test scoring chatbots for political lean, an independent rerun followed, and federal procurement now demands neutrality terms. This brief asks what a single published bias score measures and how much weight a buyer should give one. Built from the evaluation and its replication, academic audits, vendor evaluations and federal guidance. For procurement officers drafting neutrality terms and principals relying on model analysis.

Counterparty Agent Exposure: the ChatGPT Messages Plugin

Your Texts, Read by Someone Else's AI

In August 2026 a ChatGPT plugin began letting Mac users read, search, summarize and send Messages through the assistant. This brief looks at the release from the side of a principal who never installs it but whose counsel, assistants and family might, and asks what controls exist for others in a thread. Built from vendor and platform documentation, press reporting and 2026 privilege rulings. For family offices and counsel managing the people who hold a principal's correspondence.

Five questions for a report that names a person

When a screening or monitoring report names a person and a consequential decision is about to rest on it, the open question is whether anyone tested the match. This annex to CB-246 is the field instrument for finding out: a written question set for the vendor, a short test on a report already delivered, and an optional text probe with strict handling conditions. For principals, family offices and counsel deciding whether a vendor identification can carry an irreversible action.