{"id":862,"date":"2026-09-15T16:10:05","date_gmt":"2026-09-15T16:10:05","guid":{"rendered":"https:\/\/www.opey.org\/opeyit\/?page_id=862"},"modified":"2026-09-16T18:21:07","modified_gmt":"2026-09-16T18:21:07","slug":"since-publication","status":"publish","type":"page","link":"https:\/\/www.opey.org\/opeyit\/?page_id=862","title":{"rendered":"Since Publication"},"content":{"rendered":"\n<!--\n=====================================================\nWHEN AGENTS RULE  \/\/  SINCE PUBLICATION  \/\/  THE LIVING LOG\n=====================================================\n\nHOW TO INSTALL\n1. Create a new WordPress page titled \"Since Publication\"\n2. Add a Custom HTML block and paste this entire file\n3. Preview, then Publish, and note the page id\n4. On the main page (page_id=748) replace REPLACE_PAGE_UPDATES\n   with ?page_id=THE_NEW_ID\n\nWHY THIS PAGE EXISTS AS A SEPARATE PAGE\nThe main page carried a three card \"Since Publication\" band. As at\nSeptember 2026 there are twenty eight substantive developments across\nthe three crisis strands, four of which correct a figure printed in\nthe book and several of which are law that did not exist when the\nmanuscript closed. Three cards cannot hold that, and cramming it\ninto the main page degrades the main page. A separate log is also\nthe strongest asset on the site for search and for return visits,\nbecause it is the only page that has a reason to change every month.\n\nThe main page keeps a four card teaser that links here.\n\n=====================================================\nEDITORIAL RULES FOR THIS PAGE\n=====================================================\n1. Every entry carries a date, a source type and the chapters it\n   affects. An undated entry is a rumour.\n2. Entries are classified honestly into four kinds:\n     CONFIRMS   the book predicted it and it happened\n     SHARPENS   the book was directionally right, detail now firmer\n     CORRECTS   a figure or characterisation in the book is now wrong\n     NEW        did not exist when the manuscript closed\n   The CORRECTS entries are listed again, on their own, near the\n   bottom. An author who hides corrections is not worth reading.\n3. \"What has not changed\" is a section, because the most expensive\n   error in this area is assuming a deferral is a reprieve.\n4. Nothing here is legal, technical or financial advice. Every date\n   must be verified against the primary source before it is relied\n   upon, and the verification field exists for that reason.\n\nWORDPRESS COMPATIBILITY  (do not reintroduce these)\n  - NO less than sign anywhere in the script.\n  - NO ampersand in the script.\n  - NO innerHTML. Output built with createElement and textContent.\n  - No template literals, arrow functions or optional chaining.\n  - Works with JavaScript disabled: the filter simply does not\n    appear and every entry is visible.\n\nNO HYPHENS, EM DASHES OR EN DASHES IN VISIBLE COPY.\n-->\n\n<div id=\"war-updates-2026\">\n\n<style>\n#war-updates-2026 {\n    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, sans-serif !important;\n    color: #333 !important; line-height: 1.6 !important; max-width: 100% !important; margin: 0 !important; padding: 0 !important;\n}\n#war-updates-2026 * { box-sizing: border-box !important; }\n#war-updates-2026 a { text-decoration: none !important; }\n#war-updates-2026 .u-inner { max-width: 1140px !important; margin: 0 auto !important; }\n#war-updates-2026 .u-narrow { max-width: 900px !important; margin: 0 auto !important; }\n\n#war-updates-2026 .u-band { background: linear-gradient(90deg, #B45309 0%, #D97706 100%) !important; padding: 13px 20px !important; text-align: center !important; }\n#war-updates-2026 .u-band p { margin: 0 !important; color: #fff !important; font-size: 13.5px !important; font-weight: 500 !important; }\n#war-updates-2026 .u-band strong { color: #FDE68A !important; }\n\n#war-updates-2026 .u-hero {\n    background: radial-gradient(circle at 78% 22%, rgba(217,119,6,0.26) 0%, transparent 55%),\n                linear-gradient(135deg, #0a1622 0%, #1a2a3a 55%, #2d4156 100%) !important;\n    padding: 54px 20px 46px 20px !important;\n}\n#war-updates-2026 .u-eyebrow { display: inline-block !important; color: #c9a227 !important; font-size: 11px !important; font-weight: 700 !important; letter-spacing: 2px !important; text-transform: uppercase !important; margin-bottom: 12px !important; }\n#war-updates-2026 .u-h1 { color: #fff !important; font-size: 42px !important; font-weight: 800 !important; margin: 0 0 14px 0 !important; line-height: 1.06 !important; letter-spacing: -0.5px !important; }\n#war-updates-2026 .u-lede { color: rgba(255,255,255,0.86) !important; font-size: 17px !important; margin: 0 0 22px 0 !important; line-height: 1.5 !important; max-width: 720px !important; }\n#war-updates-2026 .u-counts { display: grid !important; grid-template-columns: repeat(4, 1fr) !important; gap: 12px !important; max-width: 780px !important; margin-bottom: 24px !important; }\n#war-updates-2026 .u-count { background: rgba(255,255,255,0.07) !important; border: 1px solid rgba(255,255,255,0.16) !important; border-radius: 8px !important; padding: 14px 16px !important; }\n#war-updates-2026 .u-count b { display: block !important; color: #c9a227 !important; font-size: 27px !important; font-weight: 800 !important; font-family: Georgia, serif !important; line-height: 1 !important; margin-bottom: 6px !important; }\n#war-updates-2026 .u-count span { color: rgba(255,255,255,0.82) !important; font-size: 11.5px !important; font-weight: 600 !important; letter-spacing: 0.5px !important; text-transform: uppercase !important; line-height: 1.4 !important; }\n#war-updates-2026 .u-honest { max-width: 740px !important; background: rgba(201,162,39,0.10) !important; border-left: 4px solid #c9a227 !important; border-radius: 6px !important; padding: 16px 18px !important; color: rgba(255,255,255,0.82) !important; font-size: 13.5px !important; line-height: 1.65 !important; }\n#war-updates-2026 .u-honest b { color: #c9a227 !important; }\n\n#war-updates-2026 .u-key { background: #fff !important; padding: 44px 20px !important; border-bottom: 1px solid #e5e5e5 !important; }\n#war-updates-2026 .u-keygrid { display: grid !important; grid-template-columns: repeat(4, 1fr) !important; gap: 14px !important; }\n#war-updates-2026 .u-keyitem { border-radius: 8px !important; padding: 15px 17px !important; border: 1px solid #e5e5e5 !important; }\n#war-updates-2026 .u-keyitem b { display: block !important; font-size: 11px !important; font-weight: 800 !important; letter-spacing: 1px !important; text-transform: uppercase !important; margin-bottom: 7px !important; }\n#war-updates-2026 .u-keyitem span { font-size: 13px !important; color: #555 !important; line-height: 1.6 !important; }\n#war-updates-2026 .u-keyitem.confirms { background: #f2faf5 !important; border-left: 4px solid #059669 !important; }\n#war-updates-2026 .u-keyitem.confirms b { color: #14603c !important; }\n#war-updates-2026 .u-keyitem.sharpens { background: #f5f7fa !important; border-left: 4px solid #475569 !important; }\n#war-updates-2026 .u-keyitem.sharpens b { color: #334155 !important; }\n#war-updates-2026 .u-keyitem.corrects { background: #fdeceb !important; border-left: 4px solid #B91C1C !important; }\n#war-updates-2026 .u-keyitem.corrects b { color: #922b21 !important; }\n#war-updates-2026 .u-keyitem.new { background: #fffaf1 !important; border-left: 4px solid #D97706 !important; }\n#war-updates-2026 .u-keyitem.new b { color: #8a5a00 !important; }\n\n#war-updates-2026 .u-filter { background: #1a2a3a !important; padding: 16px 20px !important; position: sticky !important; top: 0 !important; z-index: 30 !important; box-shadow: 0 3px 16px rgba(0,0,0,0.25) !important; }\n#war-updates-2026 .u-finner { max-width: 1140px !important; margin: 0 auto !important; display: flex !important; align-items: center !important; gap: 9px !important; flex-wrap: wrap !important; }\n#war-updates-2026 .u-flabel { color: rgba(255,255,255,0.65) !important; font-size: 11px !important; font-weight: 800 !important; letter-spacing: 1.2px !important; text-transform: uppercase !important; margin: 0 6px 0 0 !important; }\n#war-updates-2026 .u-fbtn {\n    background: rgba(255,255,255,0.09) !important; color: rgba(255,255,255,0.88) !important;\n    border: 1px solid rgba(255,255,255,0.22) !important; padding: 10px 15px !important; min-height: 44px !important;\n    border-radius: 6px !important; font-size: 12.5px !important; font-weight: 700 !important; cursor: pointer !important;\n    font-family: inherit !important;\n}\n#war-updates-2026 .u-fbtn:hover { background: rgba(255,255,255,0.17) !important; }\n#war-updates-2026 .u-fbtn.on { background: #c9a227 !important; color: #1a2a3a !important; border-color: #c9a227 !important; }\n#war-updates-2026 .u-fcount { color: rgba(255,255,255,0.6) !important; font-size: 12px !important; font-weight: 600 !important; margin: 0 !important; }\n\n#war-updates-2026 .u-log { background: #f7f8fa !important; padding: 46px 20px !important; }\n#war-updates-2026 .u-strand { margin-bottom: 34px !important; }\n#war-updates-2026 .u-shead { display: flex !important; align-items: center !important; gap: 15px !important; flex-wrap: wrap !important; padding: 18px 22px !important; border-radius: 10px 10px 0 0 !important; }\n#war-updates-2026 .u-shead.s-agent { background: linear-gradient(135deg, #7C3AED 0%, #6D28D9 100%) !important; }\n#war-updates-2026 .u-shead.s-quantum { background: linear-gradient(135deg, #B91C1C 0%, #991B1B 100%) !important; }\n#war-updates-2026 .u-shead.s-reg { background: linear-gradient(135deg, #047857 0%, #059669 100%) !important; }\n#war-updates-2026 .u-shead.s-ev { background: linear-gradient(135deg, #475569 0%, #334155 100%) !important; }\n#war-updates-2026 .u-sicon { width: 44px !important; height: 44px !important; flex-shrink: 0 !important; background: rgba(255,255,255,0.16) !important; border: 2px solid rgba(255,255,255,0.35) !important; border-radius: 9px !important; display: flex !important; align-items: center !important; justify-content: center !important; color: #fff !important; font-size: 13px !important; font-weight: 800 !important; letter-spacing: 0.5px !important; }\n#war-updates-2026 .u-stext { flex: 1 !important; min-width: 200px !important; }\n#war-updates-2026 .u-stext h2 { margin: 0 0 3px 0 !important; color: #fff !important; font-size: 20px !important; font-weight: 700 !important; line-height: 1.25 !important; }\n#war-updates-2026 .u-stext p { margin: 0 !important; color: rgba(255,255,255,0.85) !important; font-size: 12.5px !important; line-height: 1.45 !important; }\n#war-updates-2026 .u-sbody { background: #fff !important; border: 1px solid #e2e6ea !important; border-top: none !important; border-radius: 0 0 10px 10px !important; }\n\n#war-updates-2026 .u-entry { padding: 22px 24px !important; border-bottom: 1px solid #eef1f4 !important; }\n#war-updates-2026 .u-entry:last-child { border-bottom: none !important; }\n#war-updates-2026 .u-etop { display: flex !important; align-items: center !important; gap: 8px !important; flex-wrap: wrap !important; margin-bottom: 9px !important; }\n#war-updates-2026 .u-date { font-size: 11px !important; font-weight: 800 !important; color: #6b7785 !important; letter-spacing: 1px !important; text-transform: uppercase !important; }\n#war-updates-2026 .u-kind { font-size: 9.5px !important; font-weight: 800 !important; letter-spacing: 0.8px !important; text-transform: uppercase !important; padding: 3px 9px !important; border-radius: 3px !important; }\n#war-updates-2026 .u-kind.confirms { background: #dcf0e4 !important; color: #14603c !important; }\n#war-updates-2026 .u-kind.sharpens { background: #e7ebf0 !important; color: #334155 !important; }\n#war-updates-2026 .u-kind.corrects { background: #fadbd8 !important; color: #922b21 !important; }\n#war-updates-2026 .u-kind.new { background: #fdf2d0 !important; color: #8a5a00 !important; }\n#war-updates-2026 .u-src { font-size: 9.5px !important; font-weight: 700 !important; letter-spacing: 0.6px !important; text-transform: uppercase !important; padding: 3px 9px !important; border-radius: 3px !important; background: #f0f2f5 !important; color: #5b6673 !important; }\n#war-updates-2026 .u-etitle { font-size: 18px !important; font-weight: 700 !important; color: #1a2a3a !important; margin: 0 0 10px 0 !important; line-height: 1.32 !important; }\n#war-updates-2026 .u-ebody { font-size: 14.5px !important; color: #4a5058 !important; margin: 0 0 12px 0 !important; line-height: 1.68 !important; }\n#war-updates-2026 .u-ebody b { color: #1a2a3a !important; }\n#war-updates-2026 .u-emeans { font-size: 13.5px !important; line-height: 1.65 !important; border-radius: 6px !important; padding: 13px 15px !important; margin: 0 0 11px 0 !important; background: #f6f8fa !important; border-left: 4px solid #c9a227 !important; color: #4a5058 !important; }\n#war-updates-2026 .u-emeans b { color: #1a2a3a !important; }\n#war-updates-2026 .u-eref { font-size: 11.5px !important; color: #8892a0 !important; font-weight: 600 !important; margin: 0 !important; line-height: 1.6 !important; border-top: 1px solid #f2f4f6 !important; padding-top: 10px !important; }\n\n#war-updates-2026 .u-static { padding: 50px 20px !important; background: #fff !important; }\n#war-updates-2026 .u-static h2 { text-align: center !important; font-size: 30px !important; font-weight: 800 !important; color: #1a2a3a !important; margin: 0 0 10px 0 !important; line-height: 1.2 !important; }\n#war-updates-2026 .u-static .u-sub { text-align: center !important; max-width: 720px !important; margin: 0 auto 32px auto !important; color: #666 !important; font-size: 15.5px !important; line-height: 1.6 !important; }\n#war-updates-2026 .u-nochange { background: #fdeceb !important; border: 1px solid #f3c9c5 !important; border-left: 5px solid #B91C1C !important; border-radius: 9px !important; padding: 24px 26px !important; max-width: 900px !important; margin: 0 auto !important; }\n#war-updates-2026 .u-nochange ul { margin: 0 !important; padding-left: 22px !important; }\n#war-updates-2026 .u-nochange li { font-size: 14.5px !important; color: #4a5058 !important; margin-bottom: 11px !important; line-height: 1.65 !important; }\n#war-updates-2026 .u-nochange li:last-child { margin-bottom: 0 !important; }\n#war-updates-2026 .u-nochange li b { color: #922b21 !important; }\n\n#war-updates-2026 .u-corr { background: #f7f8fa !important; padding: 50px 20px !important; }\n#war-updates-2026 .u-scroll { overflow-x: auto !important; -webkit-overflow-scrolling: touch !important; }\n#war-updates-2026 table.u-tbl { width: 100% !important; min-width: 720px !important; border-collapse: collapse !important; font-size: 13.5px !important; background: #fff !important; }\n#war-updates-2026 table.u-tbl th { background: #1a2a3a !important; color: #fff !important; text-align: left !important; padding: 12px 14px !important; font-size: 11px !important; font-weight: 800 !important; letter-spacing: 0.6px !important; text-transform: uppercase !important; }\n#war-updates-2026 table.u-tbl td { padding: 13px 14px !important; border-bottom: 1px solid #eef1f4 !important; vertical-align: top !important; color: #4a5058 !important; line-height: 1.6 !important; }\n#war-updates-2026 table.u-tbl td b { color: #1a2a3a !important; }\n#war-updates-2026 .u-hint { display: none !important; }\n@media (max-width: 768px) { #war-updates-2026 .u-hint { display: block !important; font-size: 11.5px !important; font-weight: 700 !important; color: #6b7785 !important; margin: 0 0 9px 0 !important; text-align: center !important; } }\n\n#war-updates-2026 .u-method { background: #1a2a3a !important; padding: 46px 20px !important; }\n#war-updates-2026 .u-method h2 { color: #fff !important; text-align: center !important; font-size: 27px !important; font-weight: 800 !important; margin: 0 0 24px 0 !important; }\n#war-updates-2026 .u-mgrid { display: grid !important; grid-template-columns: repeat(2, 1fr) !important; gap: 16px !important; max-width: 960px !important; margin: 0 auto !important; }\n#war-updates-2026 .u-mitem { background: rgba(255,255,255,0.05) !important; border: 1px solid rgba(255,255,255,0.1) !important; border-radius: 8px !important; padding: 18px 20px !important; }\n#war-updates-2026 .u-mitem b { display: block !important; color: #c9a227 !important; font-size: 12px !important; font-weight: 800 !important; letter-spacing: 1px !important; text-transform: uppercase !important; margin-bottom: 8px !important; }\n#war-updates-2026 .u-mitem span { color: rgba(255,255,255,0.78) !important; font-size: 13.5px !important; line-height: 1.68 !important; }\n\n#war-updates-2026 .u-cta { background: linear-gradient(135deg, #c9a227 0%, #ddb832 100%) !important; padding: 46px 20px !important; text-align: center !important; }\n#war-updates-2026 .u-cta h2 { font-size: 27px !important; font-weight: 800 !important; color: #1a2a3a !important; margin: 0 0 10px 0 !important; }\n#war-updates-2026 .u-cta p { font-size: 15.5px !important; color: #1a2a3a !important; opacity: 0.85 !important; margin: 0 auto 24px auto !important; max-width: 660px !important; line-height: 1.6 !important; }\n#war-updates-2026 .u-ctarow { display: flex !important; justify-content: center !important; gap: 11px !important; flex-wrap: wrap !important; }\n#war-updates-2026 .u-ctarow a { background: #1a2a3a !important; color: #fff !important; padding: 13px 22px !important; min-height: 44px !important; border-radius: 6px !important; font-size: 13px !important; font-weight: 700 !important; display: inline-flex !important; align-items: center !important; }\n#war-updates-2026 .u-ctarow a:hover { background: #2d4156 !important; }\n#war-updates-2026 .u-fine { background: #0f1a24 !important; padding: 26px 20px !important; }\n#war-updates-2026 .u-fine p { max-width: 900px !important; margin: 0 auto !important; color: rgba(255,255,255,0.6) !important; font-size: 11.5px !important; line-height: 1.75 !important; }\n#war-updates-2026 .u-fine b { color: rgba(255,255,255,0.85) !important; }\n\n@media print {\n    #war-updates-2026 .u-band, #war-updates-2026 .u-hero, #war-updates-2026 .u-filter,\n    #war-updates-2026 .u-cta { display: none !important; }\n    #war-updates-2026 .u-log, #war-updates-2026 .u-corr { background: #fff !important; padding: 0 !important; }\n    #war-updates-2026 .u-entry, #war-updates-2026 .u-strand { page-break-inside: avoid !important; }\n    #war-updates-2026 .u-method { background: #fff !important; }\n    #war-updates-2026 .u-method h2, #war-updates-2026 .u-mitem b { color: #1a2a3a !important; }\n    #war-updates-2026 .u-mitem span { color: #444 !important; }\n    #war-updates-2026 .u-fine { background: #fff !important; }\n    #war-updates-2026 .u-fine p, #war-updates-2026 .u-fine b { color: #444 !important; }\n    #war-updates-2026 table.u-tbl { min-width: 0 !important; }\n}\n@media (max-width: 1000px) {\n    #war-updates-2026 .u-keygrid { grid-template-columns: repeat(2, 1fr) !important; }\n    #war-updates-2026 .u-counts { grid-template-columns: repeat(2, 1fr) !important; }\n}\n@media (max-width: 860px) {\n    #war-updates-2026 .u-mgrid { grid-template-columns: 1fr !important; }\n}\n@media (max-width: 768px) {\n    #war-updates-2026 .u-h1 { font-size: 31px !important; }\n    #war-updates-2026 .u-hero { padding: 38px 18px 34px 18px !important; }\n    #war-updates-2026 .u-log, #war-updates-2026 .u-static, #war-updates-2026 .u-corr, #war-updates-2026 .u-key { padding: 34px 16px !important; }\n    #war-updates-2026 .u-entry { padding: 19px 17px !important; }\n    #war-updates-2026 .u-shead { padding: 16px 17px !important; }\n    #war-updates-2026 .u-static h2 { font-size: 24px !important; }\n    #war-updates-2026 .u-nochange { padding: 19px 18px !important; }\n    #war-updates-2026 .u-filter { position: static !important; }\n}\n@media (max-width: 420px) {\n    #war-updates-2026 .u-h1 { font-size: 26px !important; }\n    #war-updates-2026 .u-keygrid, #war-updates-2026 .u-counts { grid-template-columns: 1fr !important; }\n    #war-updates-2026 .u-etitle { font-size: 16.5px !important; }\n}\n<\/style>\n\n<div class=\"u-band\">\n    <p>A DEFERRAL IS NOT A REPRIEVE: <strong>three obligation sets went live while one was postponed.<\/strong><\/p>\n<\/div>\n\n<div class=\"u-hero\">\n    <div class=\"u-inner\">\n        <span class=\"u-eyebrow\">Since Publication \/\/ The Living Log<\/span>\n        <h1 class=\"u-h1\">What Has Changed Since the Book Went to Press<\/h1>\n        <p class=\"u-lede\">Twenty eight dated developments across the three crisis strands plus the evidence base, each classified by whether it confirms the book, sharpens it, corrects it, or did not exist when the manuscript closed. Current as at 15 September 2026.<\/p>\n        <div class=\"u-counts\">\n            <div class=\"u-count\"><b>28<\/b><span>Dated developments<\/span><\/div>\n            <div class=\"u-count\"><b>4<\/b><span>Corrections to the book<\/span><\/div>\n            <div class=\"u-count\"><b>13<\/b><span>New since the manuscript closed<\/span><\/div>\n            <div class=\"u-count\"><b>9<\/b><span>Where the book was right early<\/span><\/div>\n        <\/div>\n        <div class=\"u-honest\">\n            <b>Why this page exists and why it is separate.<\/b> A playbook is only useful if the calendar behind it stays current. Three dates in this book moved within seven months of publication, and one of them was settled six days before it would otherwise have taken effect. This log is the part of the site that has a reason to change every month.<br><br>\n            <b>Corrections are published here, not buried.<\/b> Four figures or characterisations printed in the book are now wrong or too loose, and they are set out in their own table near the bottom with the corrected position. An author who hides corrections is not worth reading on a subject where the dates move.<br><br>\n            Nothing on this page is legal, technical or financial advice. Verify every date against the primary source before relying on it.\n        <\/div>\n    <\/div>\n<\/div>\n\n<div class=\"u-key\">\n<div class=\"u-inner\">\n    <div class=\"u-keygrid\">\n        <div class=\"u-keyitem confirms\"><b>Confirms<\/b><span>The book anticipated it and it happened. Chapter 7 predicted the Digital Omnibus outcome including entry into force three days after publication, which is exactly what occurred.<\/span><\/div>\n        <div class=\"u-keyitem sharpens\"><b>Sharpens<\/b><span>The book was directionally right and the detail is now firmer, usually because a provisional agreement became enacted text with article numbers attached.<\/span><\/div>\n        <div class=\"u-keyitem corrects\"><b>Corrects<\/b><span>A figure or a characterisation printed in the book is now wrong. Four entries. Listed again on their own below with the corrected position.<\/span><\/div>\n        <div class=\"u-keyitem new\"><b>New<\/b><span>Did not exist when the manuscript closed. A rewritten enforcement article, a new class of inventory artefact, and the first national governance framework for autonomous agents.<\/span><\/div>\n    <\/div>\n<\/div>\n<\/div>\n\n<div class=\"u-filter\">\n    <div class=\"u-finner\">\n        <p class=\"u-flabel\">Filter<\/p>\n        <button type=\"button\" class=\"u-fbtn on\" id=\"u-f-all\">Everything<\/button>\n        <button type=\"button\" class=\"u-fbtn\" id=\"u-f-agent\">Agents<\/button>\n        <button type=\"button\" class=\"u-fbtn\" id=\"u-f-quantum\">Quantum<\/button>\n        <button type=\"button\" class=\"u-fbtn\" id=\"u-f-reg\">Regulatory<\/button>\n        <button type=\"button\" class=\"u-fbtn\" id=\"u-f-ev\">Evidence<\/button>\n        <button type=\"button\" class=\"u-fbtn\" id=\"u-f-corrects\">Corrections only<\/button>\n        <p class=\"u-fcount\" id=\"u-fcount\"><\/p>\n    <\/div>\n<\/div>\n\n<div class=\"u-log\">\n<div class=\"u-inner\">\n\n    <!-- ============ REGULATORY ============ -->\n    <div class=\"u-strand\" data-strand=\"reg\">\n        <div class=\"u-shead s-reg\">\n            <div class=\"u-sicon\">REG<\/div>\n            <div class=\"u-stext\">\n                <h2>Regulatory and Sovereignty<\/h2>\n                <p>Extends Chapters 3, 7, 8 and 14. The strand where the most moved and where the most was misreported.<\/p>\n            <\/div>\n        <\/div>\n        <div class=\"u-sbody\">\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">8 July 2026 \/\/ European Union<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Enacted law<\/span><\/div>\n                <h3 class=\"u-etitle\">The Digital Omnibus on AI is enacted law, not a proposal<\/h3>\n                <p class=\"u-ebody\">The package was adopted as <b>Regulation (EU) 2026\/1744<\/b> of 8 July 2026, published in the Official Journal on 24 July and entering into force on 27 July 2026, six days before the date on which the high risk obligations would otherwise have applied. It amends the AI Act and also Regulation (EU) 2018\/1139 on aviation and Regulation (EU) 2023\/1230 on machinery. The Council gave its final approval on 29 June 2026, following the provisional political agreement of 7 May.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 7 called this outcome while it was still a proposal, and called the mechanics correctly: it stated the amendments would enter into force three days after publication in the Official Journal, which is precisely what happened. The question the chapter left open, whether the deferral would arrive in time, is now closed. It did, with six days to spare.<\/p>\n                <p class=\"u-eref\">Affects Chapter 7. Register rows EU-7, EU-8, EU-9. Verify against the consolidated text on the official EU law portal.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"corrects\">\n                <div class=\"u-etop\"><span class=\"u-date\">27 July 2026 \/\/ European Union<\/span><span class=\"u-kind corrects\">Corrects<\/span><span class=\"u-src\">Enacted law<\/span><\/div>\n                <h3 class=\"u-etitle\">Four dates moved, not two, and Article 50 was not one of them<\/h3>\n                <p class=\"u-ebody\">The Omnibus moved exactly four application dates. Annex III stand alone high risk obligations to <b>2 December 2027<\/b>. Annex I embedded high risk obligations to <b>2 August 2028<\/b>. The Member State duty to have a national regulatory sandbox operational under Article 57 to <b>2 August 2027<\/b>. And the machine readable content marking duty, for generative systems already on the market before 2 August 2026, to <b>2 December 2026<\/b>. Nothing else changed date. The Omnibus created no new obligations, removed none, and introduced no derogations or exemptions.<\/p>\n                <p class=\"u-emeans\"><b>Correction to the book.<\/b> Chapter 7 describes the Article 50 transparency and marking obligations as &#8220;deferred by four months only, from August 2026 to December 2, 2026&#8221;. The enacted position is narrower and the difference matters. <b>Article 50 applied in full on 2 August 2026 and is enforceable now.<\/b> What runs to 2 December 2026 is only the machine readable marking duty under Article 50(2), and only for generative systems that were already on the market before 2 August 2026. A system placed on the market after that date had no grace period at all. Read the chapter&#8217;s sentence as describing the transitional, not the article.<br><br>The sandbox deferral is the one most often missed entirely. It is regularly listed among the provisions the Omnibus left alone. It is not one of them.<\/p>\n                <p class=\"u-eref\">Corrects Chapter 7. Register rows EU-4, EU-5, EU-6, EU-7, EU-8. Testable per system with the EU AI Act Deadline Checker.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">27 July 2026 \/\/ European Union<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Enacted law<\/span><\/div>\n                <h3 class=\"u-etitle\">Article 75 is rewritten and the AI Office gains exclusive enforcement competence<\/h3>\n                <p class=\"u-ebody\">The Omnibus rewrites Article 75, retitling it market surveillance and control of AI systems and mutual assistance, and inserts <b>new Articles 75a to 75d<\/b>. The new Article 75(1) confers on the AI Office <b>exclusive competence<\/b> for the supervision and enforcement of obligations in relation to two categories: AI systems based on general purpose AI models where the model and the system are developed by the same provider or by providers within the same undertaking, and systems that constitute, or are integrated into, a very large online platform or very large online search engine designated under the Digital Services Act. Because these provisions sit in Chapter IX, which applies from 2 August 2026, the amendments entered the text on 27 July but the powers became exercisable a week later.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This did not exist when the manuscript closed and it changes who you answer to. For a large enough vertically integrated provider, or for anyone whose system sits inside a designated platform, the counterparty is no longer a national market surveillance authority but the AI Office directly. That is a different escalation path, a different evidentiary expectation and a different political dynamic from the national regulator relationship Chapters 8 and 14 assume. If you are in either category, your regulatory engagement plan needs rewriting rather than adjusting.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 7, 8 and 14. Verify Articles 75, 75a to 75d against the consolidated text.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"sharpens\">\n                <div class=\"u-etop\"><span class=\"u-date\">2 August 2026 \/\/ European Union<\/span><span class=\"u-kind sharpens\">Sharpens<\/span><span class=\"u-src\">In force<\/span><\/div>\n                <h3 class=\"u-etitle\">Transparency is live and enforceable, and so is Commission fining power over models<\/h3>\n                <p class=\"u-ebody\">The Act&#8217;s main transparency duties, including Article 50, took effect on their original date and are now subject to enforcement. On the same date the Commission&#8217;s power to investigate and fine general purpose AI model providers under Article 101 began, and national enforcement of the prohibitions, the AI literacy duty and the general purpose AI rules commenced. The general application date of the Regulation was itself untouched.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This is the distinction Chapter 7 emphasised and it has now been tested by events. Organisations that read the headline as a general delay and stood their programmes down missed three live obligation sets while gaining time on one deferred set. The chapter&#8217;s rule, treat August 2026 as the planning date and December 2027 as a margin to preserve rather than spend, held up exactly.<\/p>\n                <p class=\"u-eref\">Confirms Chapters 7 and 8. Register rows EU-4, EU-10, EU-11, EU-12.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">19 May 2026 \/\/ European Union<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Commission guidance<\/span><\/div>\n                <h3 class=\"u-etitle\">Commission guidance on how to classify a high risk system<\/h3>\n                <p class=\"u-ebody\">The Commission published guidelines to help providers, deployers and market authorities assess whether an AI system should be classified as high risk under Article 6, the provision the Act itself required the Commission to clarify. Subsequent draft guidance addresses specifically when a workplace AI tool falls into the high risk category, which is the single most commonly disputed classification question in the Annex III employment area.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 7 describes the Article 6 classification test and the Article 6(3) filter. What it could not include is guidance on how a regulator will read them. If you have an Article 6(3) filter claim documented before May 2026, it was written without this material and should be reviewed against it, particularly any claim resting on a system being a preparatory or narrow procedural task in an employment context.<\/p>\n                <p class=\"u-eref\">Extends Chapter 7. Relevant to any Article 6(4) documented assessment.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">2 December 2026 \/\/ European Union<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Forthcoming<\/span><\/div>\n                <h3 class=\"u-etitle\">The next hard date adds prohibitions rather than removing them<\/h3>\n                <p class=\"u-ebody\">Two new practices join the Article 5 prohibited list on 2 December 2026, covering AI generated non consensual intimate imagery and child sexual abuse material. The same date is the end of the transitional window for machine readable marking of generative systems that were already on the market before 2 August 2026.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> The prohibited list in Chapter 7 is a snapshot of February 2025 and August 2025. It grows. Any organisation running generative capability in a consumer facing product should be checking both of these, because a prohibited practice carries the highest penalty tier in the Regulation and cannot be cured by documentation.<\/p>\n                <p class=\"u-eref\">Extends Chapter 7. Register row EU-5. The nearest forthcoming obligation on this page.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">27 July 2026 \/\/ European Union<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Enacted law<\/span><\/div>\n                <h3 class=\"u-etitle\">Bias testing on special category data is now expressly permitted<\/h3>\n                <p class=\"u-ebody\">Among the simplification measures, the Omnibus permits providers and deployers to process special categories of personal data, such as biometric or health data, specifically in order to detect and correct bias in their AI systems.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This removes a genuine catch that the book does not address: the tension between an Article 10 data governance duty to test for bias and a data protection regime that restricted processing the very attributes you needed in order to test. If your fairness testing programme was scoped around that constraint, it can be widened.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 7 and 8.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"sharpens\">\n                <div class=\"u-etop\"><span class=\"u-date\">2026 \/\/ European Union<\/span><span class=\"u-kind sharpens\">Sharpens<\/span><span class=\"u-src\">Analysis<\/span><\/div>\n                <h3 class=\"u-etitle\">Why the deferral happened, which is the part that predicts the next one<\/h3>\n                <p class=\"u-ebody\">The stated reasons were structural rather than political. The harmonised technical standards needed for conformity assessment under Article 40 were not finalised by the original date. Notified bodies still required designation and accreditation. National competent authorities needed resourcing and guidelines, and the AI Office needed operational capacity. On the published analysis, an August 2026 high risk deadline would have been unenforceable in practice.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This supports the chapter&#8217;s framing and gives a test for whether the December 2027 date will hold. The binding constraint was never enterprise readiness, it was the enforcement infrastructure. Watch the progress of harmonised standards and notified body designations rather than the political commentary. If those are not in place by mid 2027, plan for the possibility of a further restaging, while remembering that the conformity work itself does not shrink either way.<\/p>\n                <p class=\"u-eref\">Extends Chapter 7. A leading indicator worth tracking quarterly.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"reg\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">2026 \/\/ United States<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">State law<\/span><\/div>\n                <h3 class=\"u-etitle\">The state patchwork keeps thickening, and keeps mirroring Europe<\/h3>\n                <p class=\"u-ebody\">Connecticut has enacted the CART Act, establishing AI related compliance requirements, joining the set of state regimes that concentrate on consequential decision making in areas such as healthcare, lending and employment.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 7 predicted that state rules would increasingly mirror EU AI Act categories while complementing the federal sectoral approach. That is what continues to happen, and it has a practical consequence the chapter draws out: an Annex III style classification exercise done once for Europe is reusable for several United States jurisdictions, which changes the economics of doing it properly.<\/p>\n                <p class=\"u-eref\">Confirms Chapter 7 and Chapter 14. Add to the jurisdiction map in the Regulatory Obligation Register.<\/p>\n            <\/div>\n\n        <\/div>\n    <\/div>\n\n    <!-- ============ QUANTUM ============ -->\n    <div class=\"u-strand\" data-strand=\"quantum\">\n        <div class=\"u-shead s-quantum\">\n            <div class=\"u-sicon\">PQC<\/div>\n            <div class=\"u-stext\">\n                <h2>Quantum Readiness<\/h2>\n                <p>Extends Chapters 2, 6, 11 and 13. The strand where the operative dates moved forward, not back.<\/p>\n            <\/div>\n        <\/div>\n        <div class=\"u-sbody\">\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">22 June 2026 \/\/ United States<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Executive order<\/span><\/div>\n                <h3 class=\"u-etitle\">Two executive orders turn post quantum migration from strategy into deadlines<\/h3>\n                <p class=\"u-ebody\">Executive Order 14412, Securing the Nation Against Advanced Cryptographic Attacks, mandates an accelerated government wide migration to post quantum cryptography, establishes binding deadlines for high value assets, and <b>directs the Federal Acquisition Regulatory Council to require contractor compliance with NIST post quantum standards<\/b>. A second order signed the same day addresses quantum leadership, commercialisation and workforce, and establishes the Quantum Computer for Application Development and Discovery Science effort. The State Department is directed to encourage foreign governments and industry to transition to NIST standardised algorithms.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 13 argues that federal timelines reach commercial contracts that carry no direct federal obligation. That argument now has an instrument behind it. A direction to the Federal Acquisition Regulatory Council is the mechanism by which a federal deadline becomes a clause in your contract, and it converts the chapter&#8217;s prediction into a procurement exposure you can put a date against.<\/p>\n                <p class=\"u-eref\">Extends Chapters 6 and 13. Register rows PQ-3, PQ-4. Verify against the published order text.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"corrects\">\n                <div class=\"u-etop\"><span class=\"u-date\">22 June 2026 \/\/ United States<\/span><span class=\"u-kind corrects\">Corrects<\/span><span class=\"u-src\">Executive order<\/span><\/div>\n                <h3 class=\"u-etitle\">The operative federal date is no longer 2035. For high value assets it is 2030 and 2031<\/h3>\n                <p class=\"u-ebody\">Federal agencies are to migrate high value assets with <b>key establishment on a post quantum standard by 31 December 2030<\/b> and <b>digital signatures by 31 December 2031<\/b>. Contractors selling to the federal government face a <b>2030<\/b> compliance deadline for NIST standardised algorithms. Support for TLS 1.3 or a successor is required across all federal systems by 2 January 2030. NIST is to run a pilot migration on a subset of its own systems, to be completed no later than 31 December 2027.<\/p>\n                <p class=\"u-emeans\"><b>Correction to the book.<\/b> Chapters 2, 6 and 13 use 2035 as the federal anchor and describe it as the de facto expectation flowing into supply chains. <b>2035 remains the outer horizon and the NSM-10 full compliance date, but it is no longer the operative planning date.<\/b> For high value assets and for anyone selling to the federal government, the dates that will appear in a contract are 2030 and 2031. If you built a migration plan against 2035 and you are in a federal supply chain, you have five fewer years than the plan assumes, and the shelf life arithmetic in Chapter 2 should be re run with the earlier date.<\/p>\n                <p class=\"u-eref\">Corrects Chapters 2, 6 and 13. Re run the Quantum Shelf Life Calculator with 2030 as the planning date.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">22 June 2026 \/\/ United States<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Executive order<\/span><\/div>\n                <h3 class=\"u-etitle\">The Cryptographic Bill of Materials becomes a named artefact<\/h3>\n                <p class=\"u-ebody\">CISA and NIST are directed to publish public guidance, within 270 days of the order, on the minimum elements of a <b>Cryptographic Bill of Materials<\/b>: a machine readable inventory designed to enable the automated assessment of the cryptographic assets used by a hardware or software element. Guidance is therefore due around March 2027.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This is a new class of artefact and it lands directly between two things the book already treats separately. Chapter 8 covers the AI bill of materials; Chapter 6 and the Cryptographic Census cover cryptographic inventory. A CBOM is the second of those in the machine readable, procurement enforceable form the first is taking. The practical move is to build your cryptographic census now in a structure that can be exported rather than rewritten, because the minimum elements will be published and a supplier questionnaire will follow within a year of that.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 6, 8 and 13. Affects the AIBOM Readiness Checklist and the Cryptographic Census workbook.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">21 September 2026 \/\/ United States<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Standards<\/span><\/div>\n                <h3 class=\"u-etitle\">FIPS 140-2 sunsets in days, with an immediate procurement consequence<\/h3>\n                <p class=\"u-ebody\">On <b>21 September 2026<\/b> all remaining FIPS 140-2 certificates move to Historical status. From that date only FIPS 140-3 validated modules may be used for new procurement. For anyone selling cryptographic products into the United States government, validation status determines market access from that day forward.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Not in the manuscript, and the nearest deadline on this page. It is also the cheapest possible test of whether your cryptographic inventory is real: if you cannot answer within the day which of your modules are validated to 140-3 and which are still on 140-2, you do not have an inventory, you have a list. That is the same test the Friday Afternoon Test applies to governance, applied to cryptography.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 6 and 13. Add as a row to the Cryptographic Census.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">April 2026 \/\/ Industry<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Vendor commitment<\/span><\/div>\n                <h3 class=\"u-etitle\">The private sector horizon moved in, exactly as the book records<\/h3>\n                <p class=\"u-ebody\">Cloudflare moved its own target for full post quantum security to <b>2029<\/b>, citing research breakthroughs from Google and Oratomic, and has described the Q Day timeline as having accelerated. The standing NIST position is that classical public key cryptography should be deprecated by 2030 and disallowed by 2035. The Commercial National Security Algorithm Suite calendar is unchanged: new national security system acquisitions compliant by <b>1 January 2027<\/b>, exclusive use in operating systems, applications and cloud services by 2033, full quantum resistance by 2035.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 1 records Google&#8217;s internal 2029 deadline and Cloudflare targeting the same horizon. Both stand, and Cloudflare has since restated its 2029 target explicitly on the back of new research. The January 2027 acquisition date in Chapter 13 also stands and is now the nearest quantum deadline for anyone in a defence supply chain.<\/p>\n                <p class=\"u-eref\">Confirms Chapters 1, 6 and 13. Register rows PQ-5 through PQ-9.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">2026 \/\/ United States<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Securities disclosure<\/span><\/div>\n                <h3 class=\"u-etitle\">Quantum readiness is becoming a disclosure question, not only a security one<\/h3>\n                <p class=\"u-ebody\">Proposed regulatory frameworks for digital asset custody now reference NIST post quantum algorithms by name and cite compatibility with the Commercial National Security Algorithm Suite as a security consideration. Several recent registration statements from companies pursuing public listings explicitly disclose the use of hybrid schemes combining post quantum with classical cryptography.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 11 argues quantum economics in the language of a CFO. This is the strongest available extension of that argument, and it changes who owns the question. Once quantum posture appears in a registration statement it is a disclosure matter with a general counsel and an audit committee attached, not a technical roadmap item. The relevant question becomes what you would be willing to state in writing, which is a materially higher bar than what you would put on a slide.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 11 and 13. Relevant to the board reporting templates.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"quantum\" data-kind=\"sharpens\">\n                <div class=\"u-etop\"><span class=\"u-date\">2026 \/\/ European Union<\/span><span class=\"u-kind sharpens\">Sharpens<\/span><span class=\"u-src\">Coordinated roadmap<\/span><\/div>\n                <h3 class=\"u-etitle\">Europe&#8217;s roadmap puts the start line at the end of this year<\/h3>\n                <p class=\"u-ebody\">The coordinated European post quantum roadmap, developed by the cooperation group established under the network and information security regime, targets the start of transition by the end of 2026 and protection of critical infrastructure by the end of 2030.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 7 treats the European regulatory calendar and Chapter 13 treats the migration. This joins them: for a European critical infrastructure operator the two strands now share a date, and the end of 2030 European target sits alongside the 31 December 2030 United States high value asset date. An organisation operating in both now has one planning horizon rather than two competing ones, which is a rare simplification in this subject.<\/p>\n                <p class=\"u-eref\">Extends Chapters 7 and 13.<\/p>\n            <\/div>\n\n        <\/div>\n    <\/div>\n\n    <!-- ============ AGENT GOVERNANCE ============ -->\n    <div class=\"u-strand\" data-strand=\"agent\">\n        <div class=\"u-shead s-agent\">\n            <div class=\"u-sicon\">AGT<\/div>\n            <div class=\"u-stext\">\n                <h2>Agent Governance<\/h2>\n                <p>Extends Chapters 1, 4, 5, 10 and 12. The strand where the book&#8217;s central argument was independently arrived at by others.<\/p>\n            <\/div>\n        <\/div>\n        <div class=\"u-sbody\">\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"confirms\" data-correction=\"yes\">\n                <div class=\"u-etop\"><span class=\"u-date\">26 May 2026 \/\/ Gartner<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Analyst research<\/span><span class=\"u-kind corrects\">Also a correction<\/span><\/div>\n                <h3 class=\"u-etitle\">The autonomy ladder argument is now the mainstream analyst position<\/h3>\n                <p class=\"u-ebody\">Gartner published research warning that enterprises applying uniform governance across all AI agents, regardless of autonomy level or scope, are heading toward widespread deployment failures. Its prediction: <b>by 2027, forty percent of enterprises will demote or decommission autonomous AI agents due to governance gaps identified only after production incidents occur<\/b>. The recommended remedy is a proportional approach that classifies agents across distinct autonomy levels, each level representing a different trust boundary with its own governance requirements, beginning at a read only observe tier and rising to agents that execute independently.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This is the strongest external validation the L0 to L5 ladder has received, and it arrived independently. The book&#8217;s argument is that autonomy level determines governance intensity, that a common language across technical and non technical stakeholders is the precondition for governing at all, and that the step where the human stops seeing the work is the step that matters. Gartner has reached the same structure, and named the failure mode: <b>&#8220;Enterprises are treating AI agent governance as binary, either locked down or fully trusted, and that is the root cause of failure.&#8221;<\/b> Note also that this is a different prediction from the June 2025 one the book cites. Both now stand, and they describe different failures: projects cancelled before production, and agents pulled back after it.<\/p>\n                <p class=\"u-eref\">Confirms Chapters 4, 5 and 12. Add alongside the existing Gartner citation in Chapter 1.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">26 May 2026 \/\/ Gartner<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Analyst research<\/span><\/div>\n                <h3 class=\"u-etitle\">Both failure modes match the book&#8217;s governance matrix<\/h3>\n                <p class=\"u-ebody\">The research names two symmetrical failures. Over restriction of simple agents slows delivery and <b>drives shadow development<\/b>. Under restriction of more autonomous agents means they operate with access and authority the organisation never properly evaluated, producing incidents &#8220;often from AI taking actions no one realised it had permission to take&#8221;.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Both halves are in the manuscript. Over restriction driving shadow development is the mechanism behind the eighth commitment, that you will find the AI you did not authorize: excessive friction manufactures the very invisibility the commitment exists to address. Under restriction producing actions nobody knew were permitted is the Chapter 5 identity argument, that an agent inherits the security posture of its credentials rather than its autonomy tier. The two failure modes are not opposites to be balanced, they are the same missing capability, which is the ability to tell agents apart.<\/p>\n                <p class=\"u-eref\">Confirms Chapters 5, 12 and Commitment Eight.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">26 May 2026 \/\/ Gartner<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Analyst research<\/span><\/div>\n                <h3 class=\"u-etitle\">Approval fatigue is named as a control failure, not a process irritation<\/h3>\n                <p class=\"u-ebody\">On the higher autonomy tiers the research is blunt: <b>&#8220;human review is effective only if it remains a meaningful control.&#8221;<\/b> Without strong security testing, clear approval workflows with audit trails and agent specific incident response procedures, &#8220;approvals can degrade under time pressure or approval fatigue, creating a false sense of safety while expanding the attack surface&#8221;.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> The Governance Charter template in the toolkit contains human oversight measures designed to detect approval by reflex, and the Human Oversight Design Template is built around anti rubber stamp measures. That design choice now has analyst language behind it. The phrase worth carrying into a governance committee is the last one: an oversight control that has degraded does not fail safe, it expands the attack surface while reporting green.<\/p>\n                <p class=\"u-eref\">Confirms Chapter 12 and the Agent Governance Charter Template.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">February 2026 \/\/ NIST<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Standards body<\/span><\/div>\n                <h3 class=\"u-etitle\">NIST opens an agent standards initiative and states the identity problem in the book&#8217;s terms<\/h3>\n                <p class=\"u-ebody\">The Center for AI Standards and Innovation launched an <b>AI Agent Standards Initiative<\/b>, calling for identity, security and monitoring standards. The associated concept paper from the National Cybersecurity Center of Excellence frames the gap directly: agents are commonly treated as <b>generic service accounts without dedicated identity, authorization or accountability controls<\/b>. Separately, NIST published <b>AI Agent Hijacking: Strengthening Evaluations for Autonomous AI Systems<\/b> in its AI 100 series.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Chapter 5 argues that the dangerous cell in the matrix is low autonomy paired with high identity privilege, and states that an L2 agent holding broad service account credentials inherits the security posture of the credentials rather than the autonomy tier. NIST has now written the same sentence in its own words. This is the single most useful citation available for a CIO who needs to justify agent identity work to a security function that already trusts NIST.<\/p>\n                <p class=\"u-eref\">Confirms Chapter 5. Strengthens the identity tier columns in the Agent Inventory workbook.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">January 2026 \/\/ Singapore<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">National framework<\/span><\/div>\n                <h3 class=\"u-etitle\">The first national governance framework for autonomous agents<\/h3>\n                <p class=\"u-ebody\">Singapore&#8217;s Infocomm Media Development Authority published a <b>Model AI Governance Framework for Agentic AI<\/b>, described as the first comprehensive governance framework for autonomous agents. It requires each agent to carry a <b>verifiable digital identity<\/b> and an <b>audit trail of which agent acted under whose authorisation<\/b>.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This is a concrete, citable implementation of the argument Chapter 5 makes in principle, and it is the direction of travel for everyone else. The two requirements are worth reading as a specification rather than as guidance: a verifiable identity per agent, and a trail that answers whose authority the agent was acting under. Most enterprises can produce neither today. If you want a target state for the identity columns of your agent inventory, this is currently the most specific published one.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 5 and 14. A target state for the Agent Inventory workbook.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">December 2025 \/\/ OWASP<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Industry standard<\/span><\/div>\n                <h3 class=\"u-etitle\">A dedicated agentic top ten exists and the classifier maps to it<\/h3>\n                <p class=\"u-ebody\">OWASP published the <b>Top 10 for Agentic Applications, version 1.0<\/b>, a separate list from the large language model application top ten. It covers goal hijacking, tool misuse and rogue agents among its named risks.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> The manuscript treats agent specific risk categories in Chapters 4 and 5 without a canonical external list to anchor them, because there was not one at the time of writing. There is now. The practical value is in procurement and assurance conversations: a named, versioned industry list is something a supplier can be asked to evidence against, and a board paper can cite without explanation.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 4, 5 and 8. Referenced by the L0 to L5 Classifier crosswalk.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">2026 \/\/ Survey evidence<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Industry survey<\/span><\/div>\n                <h3 class=\"u-etitle\">About half of production agents are running unmonitored<\/h3>\n                <p class=\"u-ebody\">Published 2026 survey work reports that <b>eighty eight percent<\/b> of organisations experienced a confirmed or suspected AI agent security incident in the prior year. Separate survey data puts mean agent monitoring coverage at <b>fifty two percent<\/b>, meaning roughly half of agents in production are running unsecured, with only <b>9.5 percent<\/b> of organisations securing more than eighty one percent of their deployed agents. Active deployers among senior technology leaders reported running seventy six to one hundred agents and roughly doubling each quarter.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> The manuscript argues that discovery precedes governance and that most of what is operating was never authorized. These figures put a number on it from the other direction: the problem is no longer only that organisations cannot find their agents, it is that they can name them and still are not watching them. A doubling rate per quarter also means an inventory is stale within a quarter, which is the argument for automated maintenance rather than periodic sweeps.<\/p>\n                <p class=\"u-eref\">Extends Chapters 1, 5 and 12. Survey figures, so treat as directional rather than precise.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"agent\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">2026 \/\/ Research<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Red team study<\/span><\/div>\n                <h3 class=\"u-etitle\">A red team study documents the failure modes end to end<\/h3>\n                <p class=\"u-ebody\">A published red teaming corpus placed autonomous agents in a live environment with persistent memory, email, chat, filesystem and shell access, and had twenty researchers interact with them over two weeks. The documented case studies include <b>unauthorised compliance with instructions from non owners, sensitive data disclosure, destructive system actions, identity spoofing, and cross agent propagation of unsafe behaviour<\/b>. Separately, backdoored builds of a widely used model gateway library were downloaded approximately <b>forty seven thousand times during the three hours<\/b> they were available on a public package index.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Two additions to the threat picture. Cross agent propagation is the one the manuscript treats least: containment procedures assume you are stopping an agent, not stopping a behaviour that has already spread to its neighbours. The supply chain figure is the more immediately actionable, because a three hour exposure window producing tens of thousands of downloads means the agent dependency chain is now an attack surface in its own right, and the Containment Procedure&#8217;s twelve prerequisites should include knowing what your agents import.<\/p>\n                <p class=\"u-eref\">Extends Chapters 5 and 12. Affects the Agent Containment and Kill Switch Procedure.<\/p>\n            <\/div>\n\n        <\/div>\n    <\/div>\n\n    <!-- ============ EVIDENCE AND ECONOMICS ============ -->\n    <div class=\"u-strand\" data-strand=\"ev\">\n        <div class=\"u-shead s-ev\">\n            <div class=\"u-sicon\">EVD<\/div>\n            <div class=\"u-stext\">\n                <h2>Evidence and Economics<\/h2>\n                <p>Extends Chapters 10 and 11. The strand that puts a currency figure against the governance argument.<\/p>\n            <\/div>\n        <\/div>\n        <div class=\"u-sbody\">\n\n            <div class=\"u-entry\" data-strand=\"ev\" data-kind=\"corrects\">\n                <div class=\"u-etop\"><span class=\"u-date\">29 July 2026 \/\/ IBM and Ponemon<\/span><span class=\"u-kind corrects\">Corrects<\/span><span class=\"u-src\">Annual study<\/span><\/div>\n                <h3 class=\"u-etitle\">The breach cost figure in the book is three editions out of date<\/h3>\n                <p class=\"u-ebody\">The 2026 Cost of a Data Breach Report puts the global average at <b>USD 4.99 million<\/b>, a twelve percent increase year on year and the highest figure recorded across twenty one editions. The United States average reached <b>USD 11.5 million<\/b>, roughly 2.3 times the global figure. The study drew on 3,558 interviews across 602 organisations in sixteen countries and seventeen industries, covering incidents between March 2025 and February 2026. Healthcare remained the costliest industry for a thirteenth consecutive year.<\/p>\n                <p class=\"u-emeans\"><b>Correction to the book.<\/b> The Executive Brief cites an average breach cost of USD 4.45 million, which is the 2023 figure. The sequence since is 4.88 million in 2024, 4.44 million in 2025 and <b>4.99 million in 2026<\/b>, with a United States figure of 11.5 million. Any business case built on 4.45 million understates the avoided loss side by roughly twelve percent globally and by a factor of more than two and a half for a United States exposure. If you have taken a paper to a committee using the book&#8217;s figure, it is worth reissuing the number rather than the paper.<\/p>\n                <p class=\"u-eref\">Corrects the Executive Brief and Chapter 10. Update the assumptions sheet in the Business Case and CpCD Model.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"ev\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">29 July 2026 \/\/ IBM and Ponemon<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Annual study<\/span><\/div>\n                <h3 class=\"u-etitle\">Governance moved from absent to written down, and not into a control<\/h3>\n                <p class=\"u-ebody\"><b>Sixty eight percent<\/b> of breached organisations lacked AI governance to manage AI or detect its unsanctioned use, against sixty three percent the year before. The composition is the interesting part. Thirty five percent had no policies at all, down from forty one. Thirty three percent had policies still in development, up from twenty two. The share with policies <b>actually in place fell to thirty two percent from thirty seven<\/b>.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> This is the governance theatre thesis measured. The population did not get worse at writing policy, it got better at it, and worse at operating it: the distribution shifted into a middle state where a policy exists on a slide deck and not in a control. That is exactly the distinction the Friday Afternoon Test exists to expose, and it is the first year the annual study has produced a composition that shows it. Note the methodology caveat, that each year matches a different sample on characteristics rather than tracking the same companies, so this describes the population studied rather than a single journey.<\/p>\n                <p class=\"u-eref\">Confirms Chapters 10 and 12, and the Friday Afternoon Test.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"ev\" data-kind=\"confirms\">\n                <div class=\"u-etop\"><span class=\"u-date\">29 July 2026 \/\/ IBM and Ponemon<\/span><span class=\"u-kind confirms\">Confirms<\/span><span class=\"u-src\">Annual study<\/span><\/div>\n                <h3 class=\"u-etitle\">Unapproved AI tools now figure in more than four in ten incidents<\/h3>\n                <p class=\"u-ebody\">Workers using unapproved AI tools figured in <b>forty three percent<\/b> of security incidents, more than double the prior year&#8217;s share. Those incidents ended in data loss or compromise about half the time, disrupted operations in four cases out of ten, and <b>about one in five drew a regulatory fine<\/b>. Only <b>thirty eight percent<\/b> of organisations required IT approval before AI was deployed, down from forty five percent, and only <b>nineteen percent<\/b> reported coordinating their governance and security teams.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Commitment Eight, that you will find the AI you did not authorize, now has a price tag and a fine rate attached. The approval figure moving the wrong way is the more troubling half: as deployment accelerated, the proportion of organisations gating it fell. The nineteen percent coordination figure is the one to take to an executive committee, because it is cheap to fix and it is the precondition for the other two.<\/p>\n                <p class=\"u-eref\">Confirms Commitment Eight and Chapter 12. Supports the Shadow AI discovery log.<\/p>\n            <\/div>\n\n            <div class=\"u-entry\" data-strand=\"ev\" data-kind=\"new\">\n                <div class=\"u-etop\"><span class=\"u-date\">29 July 2026 \/\/ IBM and Ponemon<\/span><span class=\"u-kind new\">New<\/span><span class=\"u-src\">Annual study<\/span><\/div>\n                <h3 class=\"u-etitle\">Attacks on the AI itself cost more than the average breach<\/h3>\n                <p class=\"u-ebody\">Model inversion and prompt injection attacks cost organisations an average of roughly <b>USD 6 million<\/b>, above the overall average. More than one in four malicious attacks were AI driven, a fifty six percent increase year on year, with deepfake impersonation accounting for close to half of those and AI generated malware about a fifth. Regulatory non compliance was associated with costs of <b>USD 201,112<\/b> above the global average, a figure drawn entirely from obligations already in effect. <b>Ninety two percent<\/b> of breached organisations lacked adequate access controls across human and non human identities, a category that includes API keys, service accounts and agent credentials.<\/p>\n                <p class=\"u-emeans\"><b>What it means for the book.<\/b> Three things the manuscript could not include. First, attacks aimed at the model rather than the perimeter now carry a premium, which changes the expected loss side of the Chapter 10 business case. Second, the non compliance figure is drawn from obligations already in force, which makes it usable in a paper without arguing about future regulation. Third, the ninety two percent access control figure covers non human identities explicitly, which is the closest thing yet to a market wide measurement of the Chapter 5 problem.<\/p>\n                <p class=\"u-eref\">New material affecting Chapters 5, 10 and 11. Update the expected loss inputs in the Business Case model.<\/p>\n            <\/div>\n\n        <\/div>\n    <\/div>\n\n<\/div>\n<\/div>\n\n<div class=\"u-static\">\n<div class=\"u-inner\">\n    <h2>What Has Not Changed<\/h2>\n    <p class=\"u-sub\">The most expensive error available in this subject is reading a deferral as a reprieve. Everything below kept its original date or its original force.<\/p>\n    <div class=\"u-nochange\">\n        <ul>\n            <li><b>The Article 5 prohibitions.<\/b> In force since 2 February 2025, untouched by the Omnibus, and the list grows on 2 December 2026. A prohibited practice cannot be brought into compliance by documentation or by a later date, and it carries the highest penalty tier in the Regulation.<\/li>\n            <li><b>The Article 4 AI literacy duty.<\/b> In force since 2 February 2025, with supervision and enforcement from 2 August 2026. It binds deployers, not only providers. Chapter 7 said the literacy timeline was unaffected and it was right.<\/li>\n            <li><b>Chapter V general purpose AI obligations.<\/b> Applying since 2 August 2025 on the original schedule, with Commission investigation and fining powers live from 2 August 2026.<\/li>\n            <li><b>Article 50 transparency.<\/b> Applied on 2 August 2026 as originally scheduled and enforceable now. Only the machine readable marking duty for generative systems already on the market before that date runs to 2 December 2026.<\/li>\n            <li><b>Article 49 registration.<\/b> Including, on the prevailing reading, registration in the EU database even where a provider has concluded under the Article 6(3) filter that a system is not high risk. Treat the post amendment status of that specific requirement as an open point to confirm with counsel.<\/li>\n            <li><b>The general application date of the Regulation.<\/b> 2 August 2026. The Omnibus did not move it.<\/li>\n            <li><b>The Commercial National Security Algorithm Suite calendar.<\/b> New national security system acquisitions compliant by 1 January 2027, exclusive use by 2033, full quantum resistance by 2035. Unchanged and now the nearest quantum deadline for a defence supply chain.<\/li>\n            <li><b>The arithmetic of the shelf life test.<\/b> Years available minus years needed. No development since publication changes the method, only the dates you put into it. If your confidentiality requirement exceeds the window, the exposure exists today and no future effort closes it retroactively.<\/li>\n            <li><b>The framework hierarchy.<\/b> The Sovereignty Clock remains the headline diagnostic, the autonomy ladder remains the classification instrument, and the developments above have if anything strengthened the case for both.<\/li>\n        <\/ul>\n    <\/div>\n<\/div>\n<\/div>\n\n<div class=\"u-corr\">\n<div class=\"u-inner\">\n    <h2 style=\"text-align:center !important;font-size:30px !important;font-weight:800 !important;color:#1a2a3a !important;margin:0 0 10px 0 !important;\">Corrections to the Book<\/h2>\n    <p class=\"u-sub\" style=\"text-align:center !important;max-width:740px !important;margin:0 auto 30px auto !important;color:#666 !important;font-size:15.5px !important;line-height:1.6 !important;\">Four figures or characterisations printed in the manuscript are now wrong or too loose. They are collected here so a reader can find them in one place rather than discovering them one at a time, and so a second edition has a work list.<\/p>\n    <p class=\"u-hint\">Swipe the table sideways to see every column.<\/p>\n    <div class=\"u-scroll\">\n    <table class=\"u-tbl\">\n        <thead><tr><th>Where<\/th><th>What the book says<\/th><th>The position as at September 2026<\/th><th>What to do<\/th><\/tr><\/thead>\n        <tbody>\n            <tr>\n                <td><b>Executive Brief and Chapter 10<\/b><\/td>\n                <td>Average data breach cost of USD 4.45 million.<\/td>\n                <td>That is the 2023 figure. The sequence since is 4.88 million, 4.44 million, and <b>4.99 million globally for 2026<\/b>, with the United States at <b>11.5 million<\/b>.<\/td>\n                <td>Replace the figure in any live business case. Understates avoided loss by about twelve percent globally and by more than a factor of two for a United States exposure.<\/td>\n            <\/tr>\n            <tr>\n                <td><b>Chapter 7<\/b><\/td>\n                <td>Article 50 transparency and marking obligations &#8220;deferred by four months only, from August 2026 to December 2, 2026&#8221;.<\/td>\n                <td><b>Article 50 was not deferred.<\/b> It applied in full on 2 August 2026. Only the Article 50(2) machine readable marking duty, and only for generative systems already on the market before that date, runs to 2 December 2026.<\/td>\n                <td>Read the sentence as describing the transitional rather than the article. A system placed on the market after 2 August 2026 had no grace period at all.<\/td>\n            <\/tr>\n            <tr>\n                <td><b>Chapters 2, 6 and 13<\/b><\/td>\n                <td>2035 as the federal post quantum migration deadline and the de facto supply chain expectation.<\/td>\n                <td>2035 remains the outer horizon, but Executive Order 14412 sets <b>31 December 2030<\/b> for key establishment and <b>31 December 2031<\/b> for signatures on federal high value assets, with a <b>2030<\/b> contractor deadline directed through the Federal Acquisition Regulatory Council.<\/td>\n                <td>Re run the shelf life arithmetic with 2030 as the planning date if you sell to the federal government. A plan built to 2035 has five fewer years than it assumes.<\/td>\n            <\/tr>\n            <tr>\n                <td><b>Chapter 1 and Chapter 12<\/b><\/td>\n                <td>Gartner&#8217;s June 2025 prediction that over forty percent of agentic AI projects will be cancelled by the end of 2027.<\/td>\n                <td>Still stands, but is now joined by a <b>separate May 2026 prediction<\/b>: by 2027, forty percent of enterprises will demote or decommission autonomous agents due to governance gaps found only after production incidents.<\/td>\n                <td>Cite both. They describe different failures: projects abandoned before production, and agents withdrawn after it. The second is the one that validates the ladder.<\/td>\n            <\/tr>\n        <\/tbody>\n    <\/table>\n    <\/div>\n    <p style=\"max-width:900px !important;margin:22px auto 0 auto !important;font-size:13.5px !important;color:#6b7785 !important;line-height:1.7 !important;\">\n        One further item is an editorial matter rather than a factual correction. The opening of the Executive Overview reads &#8220;In March 2027, a Fortune 500 CIO was terminated&#8221;, a future date in the past tense. The scene is a composite and is meant as a near future illustration. A second edition should either set it in the present tense or move the date behind the publication date, because a reader who notices the year reads the rest of the page differently.\n    <\/p>\n<\/div>\n<\/div>\n\n<div class=\"u-method\">\n<div class=\"u-inner\">\n    <h2>How This Page Is Maintained<\/h2>\n    <div class=\"u-mgrid\">\n        <div class=\"u-mitem\">\n            <b>Every entry is dated and sourced<\/b>\n            <span>An undated entry is a rumour. Each one names the date, the kind of source, and the chapters it affects, so you can judge the weight to give it without taking the summary on trust.<\/span>\n        <\/div>\n        <div class=\"u-mitem\">\n            <b>Corrections are published, not buried<\/b>\n            <span>Where the book is now wrong, it is listed above with the corrected position and what to do about it. Four such entries as at September 2026. On a subject where dates move, an author who hides corrections is not worth reading.<\/span>\n        <\/div>\n        <div class=\"u-mitem\">\n            <b>Survey figures are marked as survey figures<\/b>\n            <span>Analyst predictions, vendor surveys and annual studies are labelled by source type. Survey data is directional. Enacted law is not. The page does not blur the two, and the annual studies match a fresh sample each year rather than tracking the same organisations.<\/span>\n        <\/div>\n        <div class=\"u-mitem\">\n            <b>Verify before you rely<\/b>\n            <span>Nothing here is legal, technical or financial advice. Every date must be confirmed against the primary source, and the free Regulatory Obligation Register carries a confidence rating and a verification field against each obligation for exactly that purpose.<\/span>\n        <\/div>\n    <\/div>\n<\/div>\n<\/div>\n\n<div class=\"u-cta\">\n    <h2>Test this against one of your own systems<\/h2>\n    <p>Reading a log is not the same as knowing your position. The free tools apply the dates above to a system you name, and return the ones that have already passed.<\/p>\n    <div class=\"u-ctarow\">\n        <a href=\"https:\/\/www.opey.org\/opeyit\/?page_id=846\">EU AI Act Deadlines<\/a>\n        <a href=\"https:\/\/www.opey.org\/opeyit\/?page_id=836\">Quantum Shelf Life<\/a>\n        <a href=\"https:\/\/www.opey.org\/opeyit\/?page_id=822\">Sovereignty Clock<\/a>\n        <a href=\"https:\/\/www.opey.org\/opeyit\/?page_id=828\">L0 to L5 Classifier<\/a>\n        <a href=\"https:\/\/www.opey.org\/opeyit\/?page_id=748#war-downloads-section\">Free Toolkit<\/a>\n        <a href=\"https:\/\/www.opey.org\/opeyit\/?page_id=748\">The Book Page<\/a>\n        <a href=\"https:\/\/www.amazon.com\/dp\/B0H85XZT25\">Get the Book<\/a>\n    <\/div>\n<\/div>\n\n<div class=\"u-fine\">\n    <p><b>About this page.<\/b> A log of developments relevant to When Agents Rule by Steven Oppenheim, maintained after publication. It is a pointer to primary sources and not a substitute for them, and it is not legal, technical or financial advice. Dates and figures are reported as at 15 September 2026 and several have already moved once: the European high risk deadlines moved in July 2026, and the federal post quantum planning dates moved in June 2026. Analyst predictions and survey figures are the opinions and findings of the organisations named and are labelled by source type so that enacted law is not confused with forecast. Where the book is now wrong, the Corrections table above says so. Verify every date against the consolidated primary text and your own counsel before acting on it.<\/p>\n<\/div>\n\n<\/div>\n<!-- End of #war-updates-2026 -->\n\n<script>\n\/* =========================================================\n   SINCE PUBLICATION  \/\/  STRAND AND CORRECTIONS FILTER\n   No less than sign, no ampersand, no innerHTML, no template\n   literals, no arrow functions.\n   ========================================================= *\/\n(function () {\n    var root = document.getElementById('war-updates-2026');\n    if (!root) { return; }\n\n    var BTNS = [\n        { id: 'u-f-all', mode: 'all' },\n        { id: 'u-f-agent', mode: 'agent' },\n        { id: 'u-f-quantum', mode: 'quantum' },\n        { id: 'u-f-reg', mode: 'reg' },\n        { id: 'u-f-ev', mode: 'ev' },\n        { id: 'u-f-corrects', mode: 'corrects' }\n    ];\n\n    function apply(mode) {\n        var entries = root.querySelectorAll('.u-entry');\n        var shown = 0;\n        var i = 0;\n        for (i = 0; i !== entries.length; i++) {\n            var e = entries[i];\n            var strand = e.getAttribute('data-strand');\n            var kind = e.getAttribute('data-kind');\n            var show = false;\n            if (mode === 'all') { show = true; }\n            else {\n                if (mode === 'corrects') {\n                    if (kind === 'corrects') { show = true; }\n                    if (e.getAttribute('data-correction') === 'yes') { show = true; }\n                }\n                else { if (strand === mode) { show = true; } }\n            }\n            e.style.display = show ? 'block' : 'none';\n            if (show) { shown = shown + 1; }\n        }\n        \/* hide a strand block whose entries are all filtered out *\/\n        var strands = root.querySelectorAll('.u-strand');\n        for (i = 0; i !== strands.length; i++) {\n            var block = strands[i];\n            var vis = block.querySelectorAll('.u-entry');\n            var any = false;\n            var j = 0;\n            for (j = 0; j !== vis.length; j++) {\n                if (vis[j].style.display !== 'none') { any = true; }\n            }\n            block.style.display = any ? 'block' : 'none';\n        }\n        var c = document.getElementById('u-fcount');\n        c.textContent = shown + ' of ' + entries.length + ' shown';\n        for (i = 0; i !== BTNS.length; i++) {\n            var b = document.getElementById(BTNS[i].id);\n            b.className = (BTNS[i].mode === mode) ? 'u-fbtn on' : 'u-fbtn';\n        }\n    }\n\n    function bind(id, mode) {\n        document.getElementById(id).addEventListener('click', function () { apply(mode); });\n    }\n    var k = 0;\n    for (k = 0; k !== BTNS.length; k++) { bind(BTNS[k].id, BTNS[k].mode); }\n    apply('all');\n}());\n<\/script>\n\n\n\n<div id=\"elemID031021\" style=\"line-height:16px;text-align:center;z-index:100000;\"><a title=\"wix guests ip\" href=\"https:\/\/www.tracemyip.org\/pv1-3-36447-2\"><img decoding=\"async\" src=\"\/\/s3.tracemyip.org\/vLg\/1217\/4684NR-IPIB\/57003\/9\/njsUrl\/\" alt=\"Wix guests ip\" referrerpolicy=\"no-referrer-when-downgrade\" style=\"border:0px;\"><\/a><div><a href=\"https:\/\/www.tracemyip.org\/pv1-3-36447-2\">ip traffic<\/a><\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A DEFERRAL IS NOT A REPRIEVE: three obligation sets went live while one was postponed. Since Publication \/\/ The Living Log What Has Changed Since the Book Went to Press Twenty eight dated developments across the three crisis strands plus the evidence base, each classified by whether it confirms the book, sharpens it, corrects it, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-862","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=\/wp\/v2\/pages\/862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=862"}],"version-history":[{"count":2,"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=\/wp\/v2\/pages\/862\/revisions"}],"predecessor-version":[{"id":901,"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=\/wp\/v2\/pages\/862\/revisions\/901"}],"wp:attachment":[{"href":"https:\/\/www.opey.org\/opeyit\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}