The latest articles on DEV Community by Micky Irons (@mickai). https://dev.to/mickai https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3909620%2F836c63c8-56bd-4f81-b44c-5d3968713336.jpeg https://dev.to/mickai en Micky Irons Fri, 31 Jul 2026 18:32:29 +0000 https://dev.to/mickai/sealed-before-it-runs-beats-logged-after-it-happened-2849 https://dev.to/mickai/sealed-before-it-runs-beats-logged-after-it-happened-2849 <p><em>An audit record sealed before an action runs cannot be shaped by the outcome, which makes it evidence rather than recollection.</em></p> <p>Conventional systems write audit logs after actions execute, and forensics teams routinely find those logs incomplete or editable. Our Open Audit Record seals every consequential action before it runs, cryptographically signed, post quantum and verifiable offline.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/sealed-before-it-runs-vs-logging-after" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Ffboqna5fvi9h78lxeq6t.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Ffboqna5fvi9h78lxeq6t.png" alt="cover" width="800" height="420"></a></p> sovereignai openauditrecord tamperevidentaudit aigovernance Micky Irons Fri, 31 Jul 2026 18:32:14 +0000 https://dev.to/mickai/document-fraud-is-a-supply-chain-attack-and-deserves-the-same-defence-4h2f https://dev.to/mickai/document-fraud-is-a-supply-chain-attack-and-deserves-the-same-defence-4h2f <p><em>Forged certificates enter supply chains through the trusted receiving desk, so the defence is depth of review at the point of entry, on your own hardware, with every decision sealed.</em></p> <p>Document fraud behaves like a supply chain attack: it enters through the trusted receiving desk and propagates downstream. The defence is depth of review at the point of entry, every certificate cross checked on your own hardware, anomalies held for a person, every disposition sealed.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/counterfeit-certificates-supply-chains-document-fraud" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F88gz0t2n6ikb8ue0360o.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F88gz0t2n6ikb8ue0360o.png" alt="cover" width="800" height="420"></a></p> supplychaindocumentfraud sovereigndocumentreview counterfeitparts certificateverification Micky Irons Fri, 31 Jul 2026 18:31:59 +0000 https://dev.to/mickai/uk-export-controls-and-cloud-ai-the-intangible-transfer-wall-1b7h https://dev.to/mickai/uk-export-controls-and-cloud-ai-the-intangible-transfer-wall-1b7h <p><em>Uploading controlled technical data to a cloud AI raises a licensable intangible transfer question under UK export control law, and sovereign on premise review removes it.</em></p> <p>UK strategic export controls restrict intangible transfers of controlled technology by electronic means, which puts cloud AI squarely in licensing territory. We explain why on premise, air gapped review is the defensible route for British defence and dual use manufacturers.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/uk-strategic-export-controls-beyond-itar" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F7t9xk7piz1iqr3n94qqa.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F7t9xk7piz1iqr3n94qqa.png" alt="cover" width="800" height="420"></a></p> sovereignai ukexportcontrols intangibletechnologytrans defencemanufacturing Micky Irons Fri, 31 Jul 2026 18:31:43 +0000 https://dev.to/mickai/audit-working-papers-client-confidentiality-and-ai-2am3 https://dev.to/mickai/audit-working-papers-client-confidentiality-and-ai-2am3 <p><em>Audit firms can use AI on client working papers without breaching confidentiality, but only when the review runs on hardware the firm owns, with nothing leaving the building and a sealed record of every action.</em></p> <p>Audit firms can use AI on working papers without breaching client confidentiality, but only on hardware the firm owns and controls. We set out why the cloud delivery model fails the profession's duties, and what sovereign, sealed working paper review looks like instead.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/audit-working-papers-confidentiality-ai" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F1476rwey6ev2vxinc2cz.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F1476rwey6ev2vxinc2cz.png" alt="cover" width="800" height="420"></a></p> sovereignai auditworkingpapers clientconfidentiality documentreview Micky Irons Fri, 31 Jul 2026 18:31:29 +0000 https://dev.to/mickai/official-sensitive-and-ai-the-question-uk-departments-must-answer-33ea https://dev.to/mickai/official-sensitive-and-ai-the-question-uk-departments-must-answer-33ea <p><em>The defensible way for a UK department to apply AI to OFFICIAL SENSITIVE material is to run it inside its own estate, air gapped, with every action sealed and a person in charge.</em></p> <p>OFFICIAL SENSITIVE material cannot defensibly go through uncontrolled third party AI services, so the AI has to come to the data. We explain how sovereign, on premise review with a sealed audit record lets departments use modern AI on casework, procurement and policy documents.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/official-sensitive-documents-uk-public-sector-ai" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F2avssap6c9mrj6pnssko.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F2avssap6c9mrj6pnssko.png" alt="cover" width="800" height="420"></a></p> sovereignai officialsensitive ukpublicsector governmentsecurityclassif Micky Irons Fri, 31 Jul 2026 18:31:10 +0000 https://dev.to/mickai/supplier-certificates-manufacturings-quiet-counterfeit-problem-2if0 https://dev.to/mickai/supplier-certificates-manufacturings-quiet-counterfeit-problem-2if0 <p><em>Counterfeit parts enter factories through paperwork, and deep cross referencing of every supplier certificate at receiving, on your own hardware, is the defence that works.</em></p> <p>Counterfeit and non conforming parts enter manufacturing through the receiving desk. Deep, sovereign review of every supplier certificate against the records behind it catches the one that does not add up.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/supplier-certificates-manufacturing-counterfeit-risk" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fb5hdj5gssi5o6yv201yk.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fb5hdj5gssi5o6yv201yk.png" alt="cover" width="800" height="420"></a></p> suppliercertificates counterfeitparts iatf16949 as9120 Micky Irons Fri, 31 Jul 2026 18:30:55 +0000 https://dev.to/mickai/nis2-and-the-documentation-burden-on-critical-infrastructure-490 https://dev.to/mickai/nis2-and-the-documentation-burden-on-critical-infrastructure-490 <p><em>NIS2 obliges essential and important entities to document cyber risk management, supply chain security and incident handling, and to prove it on demand, with management personally accountable.</em></p> <p>NIS2 turns cyber security into an evidence discipline for critical infrastructure, with documented risk management, supply chain oversight and incident records that regulators can inspect. We explain the duties and the sovereign, on premise way to meet them.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/nis2-critical-infrastructure-documentation" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fedf33d8c2i7c5w4uwh8a.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fedf33d8c2i7c5w4uwh8a.png" alt="cover" width="800" height="420"></a></p> nis2 criticalinfrastructure sovereignai cyberriskmanagement Micky Irons Fri, 31 Jul 2026 18:30:39 +0000 https://dev.to/mickai/pharma-batch-records-part-11-wants-exactly-this-audit-trail-3gmd https://dev.to/mickai/pharma-batch-records-part-11-wants-exactly-this-audit-trail-3gmd <p><em>Part 11 requires secure, computer generated, time stamped audit trails independent of the operator, and a sovereign on premise review system with a sealed, tamper evident record is the cleanest way to meet it while using AI on batch records.</em></p> <p>FDA's 21 CFR Part 11 demands audit trails that are computer generated, time stamped and independent of the operator. We explain why batch record review on your own hardware, sealed before every action runs, is the architecture the regulation describes.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/pharma-batch-records-21-cfr-part-11" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fzonmtncya44115omfbap.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fzonmtncya44115omfbap.png" alt="cover" width="800" height="420"></a></p> 21cfrpart11 pharmabatchrecords audittrail dataintegrity Micky Irons Fri, 31 Jul 2026 18:30:21 +0000 https://dev.to/mickai/dora-and-the-document-trail-your-firm-must-be-able-to-prove-2hn6 https://dev.to/mickai/dora-and-the-document-trail-your-firm-must-be-able-to-prove-2hn6 <p><em>DORA turns operational resilience into a documentary obligation, and the firms that can produce a provable trail of registers, contracts and incident records on demand are the ones that will face inspection calmly.</em></p> <p>DORA requires financial firms to evidence their operational resilience, not merely assert it, through registers, contracts, incident logs and test results a regulator can inspect. We explain why that document trail is now the compliance programme, and why building it on your own hardware is the defensible route.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/dora-document-trail-financial-services" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Flz84buwy1xvx1ufra56c.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Flz84buwy1xvx1ufra56c.png" alt="cover" width="800" height="420"></a></p> doracompliance financialservices sovereignai operationalresilience Micky Irons Fri, 31 Jul 2026 18:29:51 +0000 https://dev.to/mickai/due-diligence-data-rooms-and-ai-privilege-is-the-constraint-1jip https://dev.to/mickai/due-diligence-data-rooms-and-ai-privilege-is-the-constraint-1jip <p><em>Law firms can use modern AI on a due diligence data room without endangering privilege only when the review runs on their own hardware, air gapped, with every action sealed to a verifiable record.</em></p> <p>Privilege rests on confidentiality, and confidentiality ends where third party infrastructure begins. We explain why sovereign, on premise review is the defensible way for deal teams to put AI to work on a data room.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/legal-due-diligence-data-rooms-on-premise-ai" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fhxcocccwxn3xfkhu6dnw.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fhxcocccwxn3xfkhu6dnw.png" alt="cover" width="800" height="420"></a></p> legalduediligence sovereignlegalai legalprofessionalprivileg onpremiseai Micky Irons Fri, 31 Jul 2026 18:29:36 +0000 https://dev.to/mickai/half-of-mro-engineering-time-goes-on-paperwork-it-does-not-have-to-312n https://dev.to/mickai/half-of-mro-engineering-time-goes-on-paperwork-it-does-not-have-to-312n <p><em>Industry commentary puts half of MRO engineering time on paperwork, and the fix is a sovereign first pass on your own hardware with engineers keeping sign off.</em></p> <p>Industry commentary puts close to half of MRO engineers' time on paperwork rather than aircraft. We explain how a sovereign first pass on your own hardware returns those hours while engineers keep disposition and sign off.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/mro-engineering-time-paperwork-problem" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F5v4azsab5bbflc0g4szg.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F5v4azsab5bbflc0g4szg.png" alt="cover" width="800" height="420"></a></p> mropaperwork aviationmaintenance taskcards sovereignai Micky Irons Fri, 31 Jul 2026 18:29:20 +0000 https://dev.to/mickai/as9100-audit-evidence-that-assembles-itself-27i https://dev.to/mickai/as9100-audit-evidence-that-assembles-itself-27i <p><em>When every review and disposition is sealed as it happens, the AS9100 audit pack becomes a query against a tamper evident record, not a quarter of manual collation.</em></p> <p>AS9100 evidence packs do not have to be assembled by hand. When every review and disposition is sealed the moment it happens, the audit pack becomes a query against a tamper evident record that an auditor can verify offline.</p> <p><em>Originally published on <a href="https://mickai.co.uk/articles/as9100-audit-evidence-that-assembles-itself" rel="noopener noreferrer">mickai.co.uk</a>. This is a cross-post; the canonical version, with the full body, footnotes and references, lives on the mickai.co.uk article page.</em></p> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fbgn1pwtvpck5lduip3ji.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fbgn1pwtvpck5lduip3ji.png" alt="cover" width="800" height="420"></a></p> as9100 aerospacequality auditevidence sovereignai