The Strategy Behind Open-Sourcing Shield
Open Source

The Strategy Behind Open-Sourcing Shield

Free developer tools as a wedge into enterprise security is a known pattern. Here is why APERION ran it on purpose, and what we expect it to do.

Craig Alberino · May 31, 2026 · 3 min read min read
The CISO's Guide to Runtime Governance for AI Agents
agentic-ai

The CISO's Guide to Runtime Governance for AI Agents

If you run security at a regulated enterprise, you already have AI agents in production. You may not have approved all of them. Your developers

Craig Alberino · May 30, 2026
Agent of an Agent
Agent governance

Agent of an Agent

When an agent spawns another agent, the authority chain gets longer and the audit trail gets thinner. The runtime layer is the only place that can prove what actually happened at the end of the chain.

Craig Alberino · May 25, 2026
The Trust Fabric: A four-layer architecture for governing AI agents
ai-governance

The Trust Fabric: A four-layer architecture for governing AI agents

The Trust Fabric, a four-layer architecture for governing AI agents

Craig Alberino · May 21, 2026
The 51-Point Gap: Why Enterprise AI Security Doesn't Match Adoption
Enterprise AI

The 51-Point Gap: Why Enterprise AI Security Doesn't Match Adoption

Fifty-five percent of enterprises run agentic AI. Four percent are confident in their security posture. The 51-point gap is the runtime governance market, and the reasons it exists explain why workflow and identity governance alone do not close it.

Craig Alberino · May 15, 2026
Six Intelligence Agencies Just Published the Runtime Governance Spec
Five Eyes

Six Intelligence Agencies Just Published the Runtime Governance Spec

NSA, CISA, ASD's ACSC, Canadian Cyber Centre, NCSC-NZ, NCSC-UK. Thirty pages. The recommended controls map directly to the runtime plane that workflow platforms do not address.

Craig Alberino · May 14, 2026
Why We Open-Sourced Shield
Shield

Why We Open-Sourced Shield

Agents in Cursor and Claude Code run tool calls you never see in a PR. DROP DATABASE in a generated migration. rm -rf in a cleanup script. Shield blocks the destructive operations before they execute, and we open-sourced it under Apache 2.0.

Craig Alberino · May 13, 2026
Runtime Plane vs Workflow Plane: The New AI Governance Split
Runtime Governance

Runtime Plane vs Workflow Plane: The New AI Governance Split

Microsoft and ServiceNow both claimed the workflow plane in five days. The runtime plane is still open. Here is why that matters for enterprise AI procurement.

Craig Alberino · May 10, 2026
Two Weeks, Three Deals: The Agent Control Plane Is Being Assembled
M&A

Two Weeks, Three Deals: The Agent Control Plane Is Being Assembled

ServiceNow Armis. Palo Alto Portkey. Cisco Astrix. In thirteen days the enterprise security incumbents stacked three deals onto the agent-era control plane. Each one occupies a different layer.

Craig Alberino · May 5, 2026
The Trust Fabric: Four Layers of Enterprise AI Governance
Trust Fabric

The Trust Fabric: Four Layers of Enterprise AI Governance

Workflow agent governance and runtime model governance are different categories with different buyers, different budgets, and different failure modes. The Trust Fabric integrates both.

Craig Alberino · Apr 30, 2026
ServiceNow Armis and the Agent-Era Control Plane
ServiceNow

ServiceNow Armis and the Agent-Era Control Plane

Cloud era split the control plane into three layers. Agent era is splitting the same way with different vendors. ServiceNow just spent $7.75B to own the middle layer. The bottom layer is still open.

Craig Alberino · Apr 22, 2026
SmartFlow Sovereign: Built for the EU AI Act
EU AI Act

SmartFlow Sovereign: Built for the EU AI Act

EU AI Act high-risk obligations take effect August 2, 2026. Most AI infrastructure produces some of the required evidence. Sovereign produces all of it, article by article, automated.

Craig Alberino · Apr 20, 2026