← Feed

Posts

• Post #4484176

  https://c.org/twj4KSpN8X

• Post #4482265

  None of this means stop disclosing; statutory filing isn't optional anyway. It means somebody needs to actually weigh the PR-vs-exposure trade-off before it goes on the website. Full piece: https://haunted.lighthouse.co.im/articles/fifteen-quid-and-your-org-chart/

• Post #4426809

  Good to see the White House is spending time on weighty matters like the price of a #burrito, maybe that’s the cause of the raging shits sic @aral@mastodon.ar.al

• Post #3553561

  @_elena@mastodon.social 2/2 So the "ethical, GDPR-native alternative to US/Chinese platforms" ships US ad-tech telemetry by default. Also the legal entity is registered as "j.d.o.o." — Croatian, not Belgian, despite the founder telling press all data's stored in Belgium. Sovereignty marketing, hyperscaler plumbing.

• Post #2383466

  New on The Sovereign Auditor: France announced it was reclaiming its digital destiny. A month later, a fifteen-year-old walked off with a third of the country's identity records. Data residency is not a security posture. https://haunted.lighthouse.co.im/articles/the-unlocked-door/ #DigitalSovereignty #Cybersecurity #DataProtection #InfoSec #EU

• Post #2383464

  The PocketOS agent had a system prompt. The system prompt said NEVER run destructive operations. The agent read it, understood it, decided the situation warranted an exception, and deleted the database and all the backups in nine seconds. This is not a rogue AI story. It is a category error story. (1/2)

• Post #2245587

  Microsoft used the word "sovereign" 14 times in their Azure Local press release this week. The hardware is yours. The governance is theirs. Who controls the control plane? https://sovereignauditor.substack.com/p/sovereignty-as-a-sku #DigitalSovereignty #CloudComputing #DataProtection #CyberSecurity #GDPR

• Post #2245586

  The Isle of Man just passed world-first data asset legislation with sovereignty at its core. Three extraterritorial regimes are converging on that claim simultaneously. The CLOUD Act. The Investigatory Powers Act. And an EU deadline that arrives in 112 days. (1)

• Post #2245585

  A Manx legal structure with an American trapdoor in the floor is not sovereignty. It's paperwork. The secondary regulations are being written now. This is where it succeeds or fails. https://sovereignauditor.substack.com/p/the-trapdoor-in-the-floor #DigitalSovereignty #DataProtection #IsleOfMan #GDPR #CLOUDAct (2)

• Post #2245584

  Oxford study: AI chatbots trained to sound warmer make up to 30% more errors. Friendliness isn't cosmetic -- it's a training objective that costs accuracy. Been running dual-model cross-checks with explicit accuracy constraints for a while. Oxford just measured why that matters. sovereignauditor.substack.com/p/nice-chatbots-make-worse-decisions #AIGovernance #MachineLearning #CyberSecurity #DigitalSovereignty

• Post #2245583

  Our Mastodon instance's database decided to eat itself in late February. 135,658 accounts. Cold. One person. No vendor support line. Back in 2.5 hours because the backup was there and had been tested. Here's what the post-incident review built next. https://sovereignauditor.substack.com/p/self-hosted-self-recovered #selfhosted #mastodon #infosec

• Post #2245582

  **Post 2:** The guidance also admits prompt injection may never be solved -- and that the industry has no mature methods to evaluate whether agentic systems are behaving as intended. The phrase that matters: the agent might be lying to the governor. Not a critic. Six governments, in writing. haunted.lighthouse.co.im/articles/strong-governance-is-not-optional/?utm_source=mastodon #CyberSecurity #AgenticAI #NCSC #CISA #Governance #IsleOfMan

• Post #2245581

  Post 1 Six national cybersecurity agencies -- CISA, NCSC-UK, ASD, CCCS, NCSC-NZ, NSA -- just published joint guidance on agentic AI. The headline advice is least privilege, human oversight. Sensible. The buried admission: agents may detect when they are being audited and perform correctly until the evaluation window closes. haunted.lighthouse.co.im/articles/strong-governance-is-not-optional/?utm_source=mastodon

• Post #2245580

  #isleofman bank holiday views

• Post #2245579

  Digital Isle of Man announced their data sovereignty framework and 16 health-tech vendors on the same day. The framework: not yet law. The vendors: already inside Manx health infrastructure, all on AWS/Azure/GCP. I traced the stacks and read the board minutes. The clutch isn't fitted yet. https://haunted.lighthouse.co.im/articles/the-missing-clutch/ #IsleOfMan #DataSovereignty #CLOUD Act #DigitalIoM

• Post #2245578

  The Sovereign Auditor now has a voice. Every new article has an audio version -- generated locally, served from our own infrastructure, no third party touches it. Free articles have the player at the top. Archive audio coming shortly. Read or listen at https://haunted.lighthouse.co.im/articles #SovereignAuditor #DigitalSovereignty

• Post #2245577

  Ronaldsway's primary radar has been dark since November 2025. Nobody said anything publicly for five months. Meanwhile Manx Utilities wants to build a wind farm at Earystane -- in the line of sight of whatever replaces it. The headline cost is £36-40m. The final bill is unknown. Dead radar, peat deposits, a generation licence before planning, and a governance structure where nobody is quite independent of anybody else. Full piece -- read or listen (~12 mins): (1/2)

• Post #1891767

  On 25 Feb 2026, the UAE announced the world's first sovereign financial cloud. The CEO: "Finance runs on digital infrastructure; hence it must be sovereign." Four days later, drones hit AWS ME-CENTRAL-1. Two AZs down simultaneously. 109 services disrupted. 37 still dark two months later. They understood the problem. The implementation gap killed them anyway. https://haunted.lighthouse.co.im/articles/finance-runs-on-digital-infrastructure/ #CloudSovereignty #DigitalSovereignty #AWS...

• Post #1650946

  New on The Sovereign Auditor -- a long read for a Friday afternoon. France just committed 2.5 million civil servants to leaving Microsoft. The reasoning is simple: a server in Paris is not legally French if the company is governed by US law. Meanwhile Australia signed a new five-year Microsoft deal in February. Different calculations. Different conclusions. https://open.substack.com/pub/sovereignauditor/p/the-exit-and-the-lock-in #DataSovereignty #CLOUDACT #Linux #OpenSource #GDPR #IsleOfMan #Di...

• Post #1551100

  MI5 is briefing CNI operators. The Technology Secretary says firms have months to prepare. On the Isle of Man, the biggest unaudited risk isn't your firewall -- it's your IT provider. The Island has been here before. https://open.substack.com/pub/sovereignauditor/p/the-island-has-been-here-before #CyberSecurity #IsleOfMan #Mythos #CyberEssentials #DataProtection #NCSC #SovereignAuditor

• Post #1551099

  The IoM's National Infrastructure Security Bill is coming. Respondents asked the Department for practical guidance. The Department said they'd write it. They haven't. So we did. Free, no email required. NISB Readiness Guide for IoM Professional Services Firms -- what you need to know before the regulations land. #IsleOfMan #CyberSecurity #NISB #DataProtection https://open.substack.com/pub/sovereignauditor/p/the-handbook-they-havent-written

• Post #1551098

  What does "digital sovereignty" actually mean -- and what doesn't it mean? We use the phrase a lot at @hauntedlighthouse. So here's our position, written down clearly. Jurisdiction. Audit trails. Knowing who can be compelled by a court order to hand over your data. Not nationalism. Not isolationism. Not a routing table with opinions. https://sovereignauditor.substack.com/p/what-digital-sovereignty-means-to #DigitalSovereignty #DataProtection #CLOUDACT #CyberEsse...

• Post #1551096

  New on Sovereign Auditor: The Isle of Man has world-first data asset legislation, a National AI Office, and a CLOUD Act sovereignty claim. It also has a £1 million budget, a signposting strategy, and a Computer Misuse Act from 1990 governing security research. The track has been marked out. The podium is ready. Worth checking whether the surface has actually been laid. https://open.substack.com/pub/sovereignauditor/p/the-infrastructure-gap-why-the-isle #IsleOfMan #AI #DataSovereignty #GDPR #...

• Post #1551095

  The EU just awarded a "sovereign cloud" contract to a Google joint venture. The framework it used to justify this has a minimum tier -- SEAL-2 -- that requires EU law compliance in normal operation. It says nothing about what happens when a US court issues a legal order. (1/3)

• Post #1551094

  The DoD designated Anthropic a supply chain risk. The NSA kept using their most capable model anyway. The ban banned something that was already running. New piece on the most perfectly formed institutional embarrassment of 2026 👇 https://sovereignauditor.substack.com/p/the-most-dangerous-ai-we-absolutely #AI #DigitalSovereignty #Anthropic #NSA #Infosec #DataGovernance #AIPolicy

• Post #1551092

  Orkney was offline for a month. One cable, bad weather, no repair ship nearby. Westminster is now funding Atlantic Bastion, standing up NATO's Arctic Sentry, calling in BT and Vodafone. Nobody called the Isle of Man. Four fibre cables. One power interconnector. One gas spur. All of it under the Irish Sea. All of it maintained by others. No maritime defence capability. No seat at the table. That is not a complaint. It is a description of a governance gap measured in fathoms. (1/2)

• Post #1551091

  New piece: Moonshot AI just open-sourced a model running 300 autonomous agents for 12 hours at ~$50 total. Your paralegal costs more per hour than the entire attack. Your firewall sees nothing. Your IPS has no signature. This is Cognitive DDoS -- Distributed Denial of Staff. The Botnet Grew a Brain: #CyberSecurity #AI #AgentSwarm #SocialEngineering #InfoSec #ProfessionalServices #Governance #ThreatIntelligence #OpenSource

• Post #1551090

  Google announced Gemini can now run air-gapped on a single server. Impressive. Also: you still can't write the governance document. We built our own sovereign AI deployment. Consumer MacBook Air M4. Open-source inference stack. CONSTRAINTS.md in a GPG-signed Forgejo repo. No rack. No Google Cloud sales call. Effectively zero incremental cost. Governance is not a product. It is a practice. https://sovereignauditor.substack.com/p/we-built-our-own-air-gapped-ai-here #DigitalSovereignty...

• Post #903773

  Anyone actually read the EU AI Act 2026 due in August this year? Thoughts? #EU #AI #eupolicy #selfhosting

• Post #875114

  Well that was an experience, wife's phone updated to #ios26.4 greeted with prove your age before continuing? So this is now a condition for use in the #uk for iPhones and the #IsleOfMan .