Blog

The blog holds posts in four categories. Regulation covers what changed in Regulation (EU) 2024/1689, with the primary text as the source. Standards covers the progress of the CEN-CENELEC JTC 21 drafts and the ISO/IEC documents behind the protocols. Enforcement covers market surveillance, authority designations and first assessments. Methods covers testing techniques and the evidence they produce. Every post cites its source and carries the organisation byline. A post appears only when a source supports it; there is no publishing schedule.

Posts

The table groups the posts by category, newest first within each group, with the articles a post touches.

Posts by category
Post	Published	Obligations
Regulation
Article 4a: the legal basis for special-category data in bias detection after the Omnibus	Published 20 September 2026AIAssuranceLabs	Art. 10
Digital Omnibus on AI: the amendments to the AI Act and what they leave in place	Published 20 September 2026AIAssuranceLabs	Art. 10 Art. 27 Art. 50
The Annex III application date after the Omnibus: what moved and what a provider still owes now	Published 20 September 2026AIAssuranceLabs	Art. 9 Art. 11 Art. 17
The new Article 5 prohibitions and the technical safeguards they name	Published 20 September 2026AIAssuranceLabs	Art. 50
Standards
EN 18286 is published: what the first JTC 21 AI Act standard covers and what OJEU citation would add	Published 20 September 2026AIAssuranceLabs	Art. 17
ISO/IEC 42005:2025 and the Article 27 FRIA: what the published impact assessment standard gives a deployer	Published 20 September 2026AIAssuranceLabs	Art. 27
prEN 18229 parts 1 to 3: where the AI trustworthiness framework stands and what a test can use today	Published 20 September 2026AIAssuranceLabs	Art. 12 Art. 13 Art. 14 Art. 15
prEN ISO/IEC 24970 at approval stage: logging and traceability evidence for Article 12	Published 20 September 2026AIAssuranceLabs	Art. 12
Enforcement
EU database registration under Article 49 after the Omnibus: who registers what	Published 21 September 2026AIAssuranceLabs	Art. 9 Art. 26
Serious incident reporting under Article 73: what the provider logs before the report	Published 21 September 2026AIAssuranceLabs	Art. 12 Art. 9
The Commission's enforcement powers over GPAI providers: information requests, evaluations and fines	Published 20 September 2026AIAssuranceLabs	Art. 53 Art. 55
Who enforces the AI Act: market surveillance authorities, notifying authorities and the AI Office	Published 20 September 2026AIAssuranceLabs	Art. 9 Art. 26
Methods
Evidence pack integrity: hash manifests and how a third party verifies a file set	Published 21 September 2026AIAssuranceLabs	Art. 11
How a mock assessment grades findings: the findings register and the Annex VI dry run	Published 21 September 2026AIAssuranceLabs	Art. 17 Art. 11
Reproducible robustness runs: seeds, dataset hashes and the protocol run record	Published 21 September 2026AIAssuranceLabs	Art. 15

Where the sources live

A post reports a change; the record of that change lives elsewhere on the site. Application dates and their sources sit on the regulation anchor, and every revision of that record is listed in the change log. The stage of each standard a post names is kept on the standards tracker. The protocols the methods posts describe are published in full, with a citation on every step, on the methodology index. What each article requires, split into testable, documentation and process elements, is on the obligation records.